ibm maximo for utilities

Name: ibm maximo for utilities
Brand: ibm

productUS

cpe:2.3:a:ibm:maximo_for_utilities:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical4high31medium9low

updated 2026-10-27

vulnerabilities (45)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2015-0104US	high8.8	6.85% (94th)	Exploit	no fix	2017-04-24	= 7.1
CVE-2015-0107US	medium6.5	5.96% (93rd)	Exploit	no fix	2017-04-24	= 7.1
CVE-2013-3323US	critical9.8	2.87% (87th)	—	no fix	2020-02-18	4 versions
CVE-2019-4364US	high8.0	2.57% (85th)	—	no fix	2019-06-19	= 7.6
CVE-2018-1524US	high8.8OT elevated	1.85% (79th)	—	no fix	2018-08-03	= 7.6.0.0
CVE-2015-4966US	medium6.5	1.53% (75th)	—	no fix	2015-11-08	8 versions
CVE-2014-6194US	medium4.0	1.44% (73rd)	—	no fix	2015-02-17	2 versions
CVE-2018-1528US	medium4.3	1.30% (70th)	—	no fix	2018-08-06	= 7.6.0.0
CVE-2014-4765US	medium5.0	1.17% (67th)	—	no fix	2014-10-02	2 versions
CVE-2014-0914US	low3.5	1.07% (65th)	—	no fix	2014-07-30	8 versions
CVE-2014-0915US	low3.5	1.05% (64th)	—	no fix	2014-07-30	8 versions
CVE-2019-4512US	medium4.3	0.99% (62nd)	—	no fix	2019-10-09	= 7.6
CVE-2015-1934US	medium5.0	0.99% (62nd)	—	no fix	2015-10-04	8 versions
CVE-2015-4967US	medium6.5	0.99% (62nd)	—	no fix	2015-10-06	8 versions
CVE-2015-5016US	medium4.3	0.97% (62nd)	—	no fix	2018-03-27	2 versions
CVE-2019-4303US	medium5.4	0.97% (62nd)	—	no fix	2019-06-19	= 7.6
CVE-2015-4965US	medium4.0	0.97% (62nd)	—	no fix	2015-10-06	8 versions
CVE-2015-7395US	medium4.0	0.96% (61st)	—	no fix	2015-11-08	8 versions
CVE-2014-3025US	low3.5	0.95% (61st)	—	no fix	2014-07-30	8 versions
CVE-2013-5402US	low3.5	0.95% (61st)	—	no fix	2013-12-18	7 versions
CVE-2015-5051US	medium4.3	0.94% (61st)	—	no fix	2016-01-03	= 7.5
CVE-2015-0108US	medium4.3	0.93% (60th)	—	no fix	2015-02-18	= 7.1
CVE-2019-4644US	medium6.1	0.89% (59th)	—	no fix	2020-04-17	2 versions
CVE-2020-4409US	high8.2	0.89% (59th)	—	no fix	2020-09-16	2 versions
CVE-2015-7452US	medium4.3	0.89% (59th)	—	no fix	2016-01-02	= 7.5
CVE-2016-5902US	medium6.1	0.87% (59th)	—	no fix	2017-02-08	3 versions
CVE-2019-4745US	medium4.3OT elevated	0.87% (59th)	—	no fix	2020-02-24	2 versions
CVE-2019-4056US	medium4.3	0.85% (58th)	—	no fix	2019-06-06	= 7.6
CVE-2015-7396US	medium5.4	0.79% (56th)	—	no fix	2016-01-02	= 7.5
CVE-2015-4944US	low3.5	0.78% (56th)	—	no fix	2015-10-06	8 versions
CVE-2016-0222US	medium4.3	0.78% (56th)	—	no fix	2016-03-14	—
CVE-2019-4446US	medium5.4	0.78% (56th)	—	no fix	2020-04-17	2 versions
CVE-2018-2028US	medium6.5OT elevated	0.77% (55th)	—	no fix	2019-06-06	= 7.6
CVE-2015-0109US	low3.5	0.76% (55th)	—	no fix	2015-02-18	= 7.1
CVE-2015-7448US	medium5.4	0.71% (53rd)	—	no fix	2016-03-12	5 versions
CVE-2019-4749US	medium5.4	0.67% (52nd)	—	no fix	2020-04-17	2 versions
CVE-2019-4486US	medium5.4	0.67% (52nd)	—	no fix	2019-10-24	= 7.6
CVE-2015-5017US	medium5.4	0.66% (51st)	—	no fix	2016-01-03	2 versions
CVE-2015-7451US	medium5.4	0.65% (51st)	—	no fix	2016-01-02	= 7.5
CVE-2019-4429US	medium5.4	0.56% (46th)	—	no fix	2020-02-19	2 versions
CVE-2016-6072US	medium5.4	0.54% (45th)	—	no fix	2017-02-01	—
CVE-2014-6102US	low2.1	0.49% (42nd)	—	no fix	2015-02-17	2 versions
CVE-2015-1933US	low2.1	0.44% (38th)	—	no fix	2015-10-04	8 versions
CVE-2019-4048US	low2.1	0.31% (23rd)	—	no fix	2019-06-06	= 7.6
CVE-2015-7487US	medium4.1	0.28% (21st)	—	no fix	2016-01-27	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')15 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor7 CVEs
CWE-284Improper Access Control4 CVEs
CWE-264CWE-2643 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2 CVEs
CWE-1188Initialization of a Resource with an Insecure Default1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE45 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan