HIGH🇵🇱 Wersja polska

CVE-2024-27266

CVSS 8.2v3.1pub. 2024-03-14upd. 2024-11-21

IBM Maximo Application Suite 7.6.1.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 284566.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

  • IBM Maximo Application Suite

    APP
    Ibm
    7.6.1.3
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XXE
CWE
References

Related vulnerabilities

CVE-2025-36386CRITICAL9.8PL ✓ten sam produkt

IBM Maximo Application Suite — pominięcie mechanizmów uwierzytelniania (RCE-ready)

CVE-2025-2898HIGH7.5ten sam produkt

IBM Maximo Application Suite 9.0 could allow an attacker with some level of access to elevate their privileges...

CVE-2024-22328HIGH7.5ten sam produkt

IBM Maximo Application Suite 8.10 and 8.11 could allow a remote attacker to traverse directories on the system...

CVE-2021-38924HIGH7.5ten sam produkt

IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information ...

CVE-2021-29854HIGH7.2ten sam produkt

IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 is vulnerable to HTTP header injection, caused by improper val...