Skip to content
OpenAdvisories

Product · IBM

Maximo Asset Management

86 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.8
    CVE-2025-2987

    IBM Maximo Asset Management server-side request forgery

    IBM Maximo Asset Management 7.6.1.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

    IBM Maximo Asset Management
  • Low 3.3
    CVE-2024-22333

    IBM Maximo Application Suite information disclosure

    IBM Maximo Asset Management 7.6.1.3 and IBM Maximo Application Suite 8.10 and 8.11 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 279973.

    IBM Maximo Asset Management Maximo Application Suite
  • Low 3.7
    CVE-2023-32335

    IBM Maximo Application Suite information disclosure

    IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser…

    IBM Maximo Asset Management Maximo Application Suite
  • Low 3.7
    CVE-2023-32334

    IBM Maximo Asset Management information disclosure

    IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or bro…

    IBM Maximo Asset Management Maximo Application Suite
  • Low 2.1
    CVE-2019-4048

    IBM Maximo Asset Management 7.6 could allow a physical user of the system to obtain sensitive information from a previo…

    IBM Maximo Asset Management