Advisories · Technology

IBM Maximo Application Suite.

Every CVE that names IBM Maximo Application Suite among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-105052 CVE record

CVSS 7.5 High

IBM Maximo Application Suite Information Disclosure
- IBM Maximo Application Suite
- Path traversal
Not analysed yet 12 Oct 2026
CVE-2026-15656 CVE record

CVSS 4.3 Medium

IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak…
- IBM Maximo Application Suite
- CWE-614
Not analysed yet 5 Aug 2026
CVE-2026-18531 CVE record

CVSS 5.3 Medium

IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak…
- IBM Maximo Application Suite
- Weak cryptography or TLS
Not analysed yet 5 Aug 2026
CVE-2026-4820 CVE record

CVSS 4.3 Medium

IBM Maximo Application Suite was vulnerable to because Cookie ltpatoken2_<workspace_name> was not set with secure flag
- IBM Maximo Application Suite
- CWE-614
Not analysed yet 1 Apr 2026
CVE-2025-36386 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

There is a vulnerability in the IBM Maximo Manage application in IBM Maximo Application Suite for Cognos Analytics
- IBM Maximo Application Suite
- CWE-305
Not analysed yet 28 Oct 2025
CVE-2025-2898 CVE record

CVSS 7.5 High

IBM Maximo Application Suite privilege escalation
- IBM Maximo Application Suite
- Privilege escalation
Not analysed yet 6 May 2025
CVE-2023-43037 CVE record

CVSS 6.5 Medium

IBM Maximo Application Suite improper access control
- IBM Maximo Application Suite
- CWE-20
Not analysed yet 10 Apr 2025
CVE-2025-1500 CVE record

CVSS 5.5 Medium

IBM Maximo Application Suite file upload
- IBM Maximo Application Suite
- Unrestricted file upload
Not analysed yet 5 Apr 2025
CVE-2024-35150 CVE record

CVSS 5.3 Medium

IBM Maximo Application Suite log manipulation
- IBM Maximo Application Suite
- Other injection
Not analysed yet 25 Jan 2025
CVE-2024-35148 CVE record

CVSS 6.3 Medium

IBM Maximo Application Suite SQL injection
- IBM Maximo Application Suite
- SQL injection
Not analysed yet 25 Jan 2025
CVE-2024-35144 CVE record

CVSS 5.3 Medium

IBM Maximo Application Suite information disclosure
- IBM Maximo Application Suite
- CWE-540
Not analysed yet 25 Jan 2025
CVE-2024-35145 CVE record

CVSS 6.1 Medium

IBM Maximo Application Suite cross-site scripting
- IBM Maximo Application Suite
- Cross-site scripting (XSS)
Not analysed yet 25 Jan 2025
CVE-2024-35146 CVE record

CVSS 5.4 Medium

IBM Maximo Application Suite cross-site scripting
- IBM Maximo Application Suite
- Cross-site scripting (XSS)
Not analysed yet 6 Nov 2024
CVE-2024-37068 CVE record

CVSS 5.9 Medium

IBM Maximo Application Suite information disclosure
- IBM Maximo Application Suite
- Weak cryptography or TLS
Not analysed yet 7 Sept 2024
CVE-2024-22333 CVE record

CVSS 3.3 Low

IBM Maximo Application Suite information disclosure
- IBM Maximo Application Suite
- IBM Maximo Asset Management
- CWE-525
Not analysed yet 13 Jun 2024
CVE-2024-22328 CVE record

CVSS 7.5 High

IBM Maximo Application Suite information disclosure
- IBM Maximo Application Suite
- Path traversal
Not analysed yet 6 Apr 2024
CVE-2023-32335 CVE record

CVSS 3.7 Low

IBM Maximo Application Suite information disclosure
- IBM Maximo Application Suite
- IBM Maximo Asset Management
- CWE-598
Not analysed yet 13 Mar 2024
CVE-2023-32332 CVE record

CVSS 5.4 Medium

IBM Maximo Application Suite and IBM Maximo Asset Management HTML injection
- IBM Maximo Asset Management
- IBM Maximo Application Suite
Not analysed yet 8 Sept 2023
CVE-2023-32334 CVE record

CVSS 3.7 Low

IBM Maximo Asset Management information disclosure
- IBM Maximo Asset Management
- IBM Maximo Application Suite
Not analysed yet 5 Jun 2023
CVE-2023-27861 CVE record

CVSS 5.9 Medium

IBM Maximo Application Suite information disclosure
- IBM Maximo Application Suite
- Weak cryptography or TLS
Not analysed yet 5 Jun 2023
CVE-2022-35645 CVE record

CVSS 6.4 Medium

IBM Maximo Asset Management cross-site scripting
- IBM Maximo Asset Management
- IBM Maximo Application Suite
- Cross-site scripting (XSS)
Not analysed yet 2 Mar 2023
CVE-2022-43923 CVE record

CVSS 6.2 Medium

Sensitive information in log files in IBM Maximo Application Suite
- IBM Maximo Application Suite
- Information disclosure
Not analysed yet 24 Feb 2023