ibm maximo application suite

Name: ibm maximo application suite
Brand: ibm

productUS

cpe:2.3:a:ibm:maximo_application_suite:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical12high10medium2low

updated 2026-10-28

vulnerabilities (34)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-29854US	high7.2	1.14% (66th)	—	no fix	2022-05-03	= 8.7
CVE-2021-38924US	high7.5	1.01% (63rd)	—	no fix	2022-09-14	2 versions
CVE-2024-27266US	high8.2	0.85% (58th)	—	no fix	2024-03-14	= 7.6.1.3
CVE-2024-22328US	high7.5	0.84% (58th)	—	no fix	2024-04-06	2 versions
CVE-2023-32334US	medium5.3	0.64% (51st)	—	no fix	2023-06-05	= 8.8.0
CVE-2023-32332US	medium5.4	0.63% (50th)	—	no fix	2023-09-08	2 versions
CVE-2025-36386US	—	0.55% (46th)	—	no fix	2025-10-28	2 versions
CVE-2022-35281US	high8.8	0.52% (44th)	—	no fix	2023-01-09	2 versions
CVE-2023-32335US	high7.5	0.50% (43rd)	—	no fix	2024-03-13	2 versions
CVE-2022-41734US	high7.5OT elevated	0.50% (43rd)	—	no fix	2023-02-17	2 versions
CVE-2021-29743US	medium5.4	0.50% (42nd)	—	no fix	2021-08-30	8.0 → 8.4
CVE-2021-29744US	medium5.4	0.50% (42nd)	—	no fix	2021-08-27	= 8.4
CVE-2022-35645US	medium5.4	0.49% (42nd)	—	no fix	2023-03-02	2 versions
CVE-2026-18531US	—OT elevated	0.38% (32nd)	—	9.1.20	2026-08-05	3 versions
CVE-2024-35148US	high8.8	0.36% (30th)	—	no fix	2025-01-25	3 versions
CVE-2025-2898US	high8.8	0.34% (28th)	—	no fix	2025-05-06	= 9.0
CVE-2023-27861US	medium5.9OT elevated	0.34% (27th)	—	no fix	2023-06-05	2 versions
CVE-2023-43037US	—	0.34% (27th)	—	8.11.13	2025-04-10	2 versions
CVE-2023-38723US	medium6.4	0.32% (24th)	—	no fix	2024-03-13	= 7.6.1.3
CVE-2024-38314US	—OT elevated	0.31% (24th)	—	8.11.12	2024-10-24	3 versions
CVE-2024-35144US	—	0.31% (23rd)	—	8.10.14	2025-01-25	3 versions
CVE-2023-47718US	high8.8	0.29% (22nd)	—	8.10.6	2024-01-19	2 versions
CVE-2025-1500US	high8.0	0.28% (21st)	—	9.0.7	2025-04-05	9.0 → 9.0.7
CVE-2024-35150US	—	0.28% (21st)	—	9.0.5	2025-01-25	4 versions
CVE-2023-32337US	medium5.4	0.28% (21st)	—	8.10.6	2024-01-19	2 versions
CVE-2024-35146US	—	0.27% (19th)	—	no fix	2024-11-06	3 versions
CVE-2024-35145US	—	0.26% (17th)	—	no fix	2025-01-25	= 9.0
CVE-2024-37068US	high7.5OT elevated	0.25% (16th)	—	no fix	2024-09-07	3 versions
CVE-2022-43923US	medium5.5	0.19% (9th)	—	no fix	2023-02-24	2 versions
CVE-2026-15656US	—	0.19% (8th)	—	9.1.20	2026-08-05	3 versions
CVE-2024-22333US	low3.3	0.18% (8th)	—	no fix	2024-06-13	2 versions
CVE-2022-41732US	medium5.5	0.17% (6th)	—	no fix	2022-11-28	2 versions
CVE-2025-14684US	low3.3	0.14% (3rd)	—	9.1.6	2026-03-25	4 versions
CVE-2026-4820US	—OT elevated	0.12% (2nd)	—	8.11.30	2026-04-01	4 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7 CVEs
CWE-117Improper Output Neutralization for Logs2 CVEs
CWE-319Cleartext Transmission of Sensitive Information2 CVEs
CWE-598Use of HTTP Request With Sensitive Query String2 CVEs
CWE-614Sensitive Cookie in HTTPS Session Without 'Secure' Attribute2 CVEs
CWE-116Improper Encoding or Escaping of Output1 CVEs
CWE-1236Improper Neutralization of Formula Elements in a CSV File1 CVEs
CWE-20Improper Input Validation1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE34 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan