Vulnerabilities
Summary — last 7 days
New vulnerabilities4,961▲ 82 vs. last week
Critical / high2,119▼ 669 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)773▲ 710 vs. last week
More filters
7 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | Critical (9.8) | 0.54% | — | IBM Maximo AI ServiceAI | 10/12/2026 | 10/13/2026 | IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation. | |
| Analyzed | Critical (9.8) | 0.55% | — | IBM Maximo Application Suite | 10/28/2025 | 9/25/2026 | IBM Maximo Application Suite 9.0.0 through 9.0.15 and 9.1.0 through 9.1.4 could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application. | |
| Modified | Critical (9.8) | 0.55% | — | IBM Maximo Asset Management | 2/2/2024 | 6/17/2026 | IBM Maximo Asset Management 7.6.1.3 could allow a remote attacker to log into the admin panel due to improper access controls. IBM X-Force ID: 255073. | |
| Modified | Critical (9.8) | 1.7% | — | IBM Maximo Asset Management | 8/12/2021 | 6/17/2026 | IBM Maximo Asset Management 7.6.0 and 7.6.1 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 198243. | |
| Modified | Critical (9.8) | 2.7% | — | IBM Maximo Asset Management | 10/5/2020 | 6/17/2026 | IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow an attacker to bypass authentication and issue commands using a specially crafted HTTP command. IBM X-Force ID: 181995. | |
| Modified | Critical (9.8) | 2.9% | — | IBM Change AND Configuration Management DatabaseIBM Maximo Asset ManagementIBM Maximo Asset Management EssentialsIBM Maximo FOR Government+9 | 2/18/2020 | 6/16/2026 | A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the authentication session, which could let a malicious user obtain unauthorized access. | |
| Modified | Critical (9.8) | 1.9% | — | IBM Maximo Asset Management | 7/5/2017 | 6/17/2026 | IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123297. |