Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:maximo_application_suite_location_service_for_esri_component:9.2:*:*:*:*:*:*:*

part: a version: 9.2 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMaximo Application Suite Location Service For Esri Component (1a06df28-13bf-540e-a95c-9536597bb60d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-18517 vulnerable 2026-11-03 10:17:40.489925 IBM Maximo Application Suite - Location Service for Esri Component Improper Access Control
HIGH (7.7)
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Suite — Location Service for Esri Component is vulnerable to unintended network egress due to a misconfigured Kubernetes NetworkPolicy.
Published: 2026-10-12T21:01:30.355Z
Updated: 2026-10-13T14:39:09.498Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-18513 vulnerable 2026-11-03 10:17:40.464778 IBM Maximo Application Suite - Location Service for Esri Component Improper Privilege Management
HIGH (7.2)
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper access control due to a schema-less Custom Resource Definition.
Published: 2026-10-12T21:01:37.878Z
Updated: 2026-10-14T03:59:13.353Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-18537 vulnerable 2026-11-03 10:17:40.340405 IBM Maximo Application Suite - Location Service for Esri Component Code Execution
HIGH (8.7)
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image reference in a Kubernetes operator template.
Published: 2026-10-12T21:01:15.083Z
Updated: 2026-10-14T03:59:14.775Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-18533 vulnerable 2026-11-03 10:17:40.278728 IBM Maximo Application Suite - Location Service for Esri Component Code Execution
MEDIUM (6.5)
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image configuration in a Kubernetes operator template.
Published: 2026-10-12T21:01:22.257Z
Updated: 2026-10-14T03:59:14.071Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.