HIGH🇵🇱 Wersja polska

CVE-2024-22328

CVSS 7.5v3.1pub. 2024-04-06upd. 2025-01-14

IBM Maximo Application Suite 8.10 and 8.11 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 279950.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • IBM Maximo Application Suite

    APP
    Ibm
    8.108.11
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Path Traversal
CWE
References

Related vulnerabilities

CVE-2025-36386CRITICAL9.8PL ✓ten sam produkt

IBM Maximo Application Suite — pominięcie mechanizmów uwierzytelniania (RCE-ready)

CVE-2025-2898HIGH7.5ten sam produkt

IBM Maximo Application Suite 9.0 could allow an attacker with some level of access to elevate their privileges...

CVE-2024-27266HIGH8.2ten sam produkt

IBM Maximo Application Suite 7.6.1.3 is vulnerable to an XML External Entity Injection (XXE) attack when proce...

CVE-2021-38924HIGH7.5ten sam produkt

IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information ...

CVE-2021-29854HIGH7.2ten sam produkt

IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 is vulnerable to HTTP header injection, caused by improper val...