Veille CVE

Recherche « IBM Maximo Application Suite »

8 CVE

Critique 0 Élevée 7 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « IBM Maximo Application Suite » ✕
  1. CVE-2026-92876 7.5 Élevée

    IBM Maximo Application Suite - IoT Component

    IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.

  2. CVE-2026-75881 7.5 Élevée

    IBM Maximo Application Suite - IoT Component

    IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to an infinite parsing loop when processing certain inputs.

  3. CVE-2026-18537 8.7 Élevée

    IBM Maximo Application Suite - Location Service for Esri Component

    IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image reference in a Kubernetes operator template.

  4. CVE-2026-18533 6.5 Moyenne

    IBM Maximo Application Suite - Location Service for Esri Component

    IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image configuration in a Kubernetes operator template.

  5. CVE-2026-18529 8.7 Élevée

    IBM Maximo Application Suite - Location Service for Esri Component

    IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection due to improper sanitisation of a user-controlled value passed to a shell command in a Kubernetes operator task.

  6. CVE-2026-18517 7.7 Élevée

    IBM Maximo Application Suite - Location Service for Esri Component

    IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Suite — Location Service for Esri Component is vulnerable to unintended network egress due to a misconfigured Kubernetes NetworkPolicy.

  7. CVE-2026-18513 7.2 Élevée

    IBM Maximo Application Suite - Location Service for Esri Component

    IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper access control due to a schema-less Custom Resource Definition.

  8. CVE-2026-105052 7.5 Élevée

    IBM Maximo Application Suite

    IBM Maximo Application Suite 8.10, 8.11, 9.0, 9.1, and 9.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.