IBM Maximo Application Suite 8.8.0
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:maximo_application_suite:8.8.0:*:*:*:*:*:*:*
part: a version: 8.8.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Maximo Application Suite (6009ecff-b731-590e-87bd-ae314904aef3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-32334 |
vulnerable | 2026-06-08 06:04:45.517278 |
IBM Maximo Asset Management information disclosure
LOW (3.7)
IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 255074.
Published: 2023-06-05T00:44:31.786Z
Updated: 2025-01-08T16:47:18.253Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27861 |
vulnerable | 2026-06-08 05:57:42.344040 |
IBM Maximo Application Suite information disclosure
MEDIUM (5.9)
IBM Maximo Application Suite - Manage Component 8.8.0 and 8.9.0 transmits sensitive information in cleartext that could be intercepted by an attacker using man in the middle techniques. IBM X-Force ID: 249208.
Published: 2023-06-05T00:23:57.700Z
Updated: 2025-01-08T16:49:13.737Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46774 |
not_vulnerable | 2026-06-08 05:50:39.425127 |
IBM Manage Application security bypass
MEDIUM (5.4)
IBM Manage Application 8.8.0 and 8.9.0 in the IBM Maximo Application Suite is vulnerable to incorrect default permissions which could give access to a user to actions that they should not have access to. IBM X-Force ID: 242953.
Published: 2023-03-15T18:21:54.746Z
Updated: 2025-02-26T20:18:14.355Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43923 |
vulnerable | 2026-06-08 05:49:35.019530 |
Details available
MEDIUM (6.2)
IBM Maximo Application Suite 8.8.0 and 8.9.0 stores potentially sensitive information that could be read by a local user. IBM X-Force ID: 241584.
Published: 2023-02-24T14:13:01.313Z
Updated: 2025-03-11T15:41:31.081Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35645 |
vulnerable | 2026-06-08 05:46:05.060988 |
IBM Maximo Asset Management cross-site scripting
MEDIUM (6.4)
IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8 and 8.9 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 230958.
Published: 2023-03-02T20:14:56.934Z
Updated: 2025-03-05T19:53:18.251Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.