← Vulnerability feed

Vulnerability record · CVE-2024-22333 · published 13 June 2024

CVE-2024-22333: Ibm maximo application suite exposure of resource to wrong sphere vulnerability

Ibm · Maximo Application Suite

IBM Maximo Asset Management 7.6.1.3 and IBM Maximo Application Suite 8.10 and 8.11 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 279973.

3.3 CVSS 3.1 Low EPSS 0.18% · top 93.2% CWE-525 · CWE-525CWE-668 · Exposure of resource to wrong sphere
3.3CVSS 3.1 base score
0.18%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

IBM Maximo Asset Management 7.6.1.3 and IBM Maximo Application Suite 8.10 and 8.11 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 279973.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://exchange.xforce.ibmcloud.com/vulnerabilities/279973 VDB Entry
https://www.ibm.com/support/pages/node/7157256 Vendor Advisory
https://www.ibm.com/support/pages/node/7157257 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/279973 VDB Entry
https://www.ibm.com/support/pages/node/7157256 Vendor Advisory
https://www.ibm.com/support/pages/node/7157257 Vendor Advisory

Track CVE-2024-22333 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2025-36386Ibm maximo application suite vulnerabilityIBM Maximo Application Suite 9.0.0 through 9.0.15 and 9.1.0 through 9.1.4 could allow a remote attacker to bypass authentication mechanisms and gain …EPSS 0.52%9.8CVE-2023-32333Ibm maximo asset management improper access control vulnerabilityIBM Maximo Asset Management 7.6.1.3 could allow a remote attacker to log into the admin panel due to improper access controls. IBM X-Force ID: 255073.EPSS 0.55%9.8CVE-2021-20509Ibm maximo asset management injection vulnerabilityIBM Maximo Asset Management 7.6.0 and 7.6.1 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the sys…EPSS 1.7%9.8CVE-2020-4493Ibm maximo asset management vulnerabilityIBM Maximo Asset Management 7.6.0 and 7.6.1 could allow an attacker to bypass authentication and issue commands using a specially crafted HTTP comman…EPSS 2.7%9.8CVE-2013-3323Ibm change and configuration management database improper privilege management vulnerabilityA Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to …EPSS 2.9%9.8CVE-2017-1175Ibm maximo asset management sql injection vulnerabilityIBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which co…EPSS 1.9%8.8CVE-2025-2898Ibm maximo application suite vulnerabilityIBM Maximo Application Suite 9.0 could allow an attacker with some level of access to elevate their privileges due to a security configuration vulner…EPSS 0.33%8.8CVE-2024-35148Ibm maximo application suite sql injection vulnerabilityIBM Maximo Application Suite 8.10.10, 8.11.7, and 9.0 - Monitor Component is vulnerable to SQL injection. A remote attacker could send specially craf…EPSS 0.36%

Source: NIST National Vulnerability Database (record CVE-2024-22333), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.