IBM Maximo Application Suite 9.0 could allow an attacker with some level of access to elevate their privileges due to a security configuration vulnerability in Role-Based Access Control (RBAC) configurations.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HIBM Maximo Application Suite
APPIbm9.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Powiązane podatności
CVE-2025-36386CRITICAL9.8PL ✓ten sam produkt
IBM Maximo Application Suite — pominięcie mechanizmów uwierzytelniania (RCE-ready)
CVE-2024-22328HIGH7.5ten sam produkt
IBM Maximo Application Suite 8.10 and 8.11 could allow a remote attacker to traverse directories on the system...
CVE-2024-27266HIGH8.2ten sam produkt
IBM Maximo Application Suite 7.6.1.3 is vulnerable to an XML External Entity Injection (XXE) attack when proce...
CVE-2021-38924HIGH7.5ten sam produkt
IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information ...
CVE-2021-29854HIGH7.2ten sam produkt
IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 is vulnerable to HTTP header injection, caused by improper val...