IBM Maximo Application Suite 8.10, 8.11, and 9.0 - Monitor Component stores source code on the web server that could aid in further attacks against the system.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NIBM Maximo Application Suite
APPIbm9.08.10 – 8.10.14 (bez)8.11 – 8.11.11 (bez)
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje
Powiązane podatności
CVE-2025-36386CRITICAL9.8PL ✓ten sam produkt
IBM Maximo Application Suite — pominięcie mechanizmów uwierzytelniania (RCE-ready)
CVE-2025-2898HIGH7.5ten sam produkt
IBM Maximo Application Suite 9.0 could allow an attacker with some level of access to elevate their privileges...
CVE-2024-22328HIGH7.5ten sam produkt
IBM Maximo Application Suite 8.10 and 8.11 could allow a remote attacker to traverse directories on the system...
CVE-2024-27266HIGH8.2ten sam produkt
IBM Maximo Application Suite 7.6.1.3 is vulnerable to an XML External Entity Injection (XXE) attack when proce...
CVE-2021-38924HIGH7.5ten sam produkt
IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information ...