Refine your search

2 vulnerabilities found for Maximo Application Suite - IoT Component by IBM

CVE-2026-92876 (GCVE-0-2026-92876)
Vulnerability from cvelistv5
Published
2026-10-12 21:42
Modified
2026-10-16 17:19
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE
Summary
IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.
References
Impacted products
Vendor Product Version
IBM Maximo Application Suite - IoT Component Version: 9.2.0
Version: 9.1.0
Version: 9.0.0
    cpe:2.3:a:ibm:maximo_application_suite_iot_component:9.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:maximo_application_suite_iot_component:9.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:maximo_application_suite_iot_component:9.0.0:*:*:*:*:*:*:*
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-92876",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-16T15:22:11.211947Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-16T17:19:19.257Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:maximo_application_suite_iot_component:9.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:maximo_application_suite_iot_component:9.1.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:maximo_application_suite_iot_component:9.0.0:*:*:*:*:*:*:*"
          ],
          "product": "Maximo Application Suite - IoT Component",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "9.2.0"
            },
            {
              "status": "affected",
              "version": "9.1.0"
            },
            {
              "status": "affected",
              "version": "9.0.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.\u003c/p\u003e"
            }
          ],
          "value": "IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-674",
              "description": "CWE-674 Uncontrolled Recursion",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-12T21:42:42.280Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7290173"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading.\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003e\u003cp\u003eRemediated Product(s)\u003c/p\u003e\u003c/td\u003e\u003ctd\u003eVersion(s)\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Maximo Application Suite - IoT Component\u003c/td\u003e\u003ctd\u003e9.2.3 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Maximo Application Suite - IoT Component\u003c/td\u003e\u003ctd\u003e9.1.15\u00a0 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Maximo Application Suite - IoT Component\u003c/td\u003e\u003ctd\u003e9.0.24\u00a0 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing the vulnerability now by upgrading.\n\n\n\nRemediated Product(s)\n\nVersion(s)IBM Maximo Application Suite - IoT Component9.2.3 or  the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery IBM Maximo Application Suite - IoT Component9.1.15\u00a0 or  the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery IBM Maximo Application Suite - IoT Component9.0.24\u00a0 or  the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery"
        }
      ],
      "title": "IBM Maximo Application Suite - IoT Component Denial of Service"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-92876",
    "datePublished": "2026-10-12T21:42:42.280Z",
    "dateReserved": "2026-09-17T07:00:56.070Z",
    "dateUpdated": "2026-10-16T17:19:19.257Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-75881 (GCVE-0-2026-75881)
Vulnerability from cvelistv5
Published
2026-10-12 21:01
Modified
2026-10-13 13:48
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE
  • CWE-400 - Uncontrolled Resource Consumption
Summary
IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to an infinite parsing loop when processing certain inputs.
References
Impacted products
Vendor Product Version
IBM Maximo Application Suite - IoT Component Version: 9.2.0
Version: 9.1.0
Version: 9.0.0
    cpe:2.3:a:ibm:maximo_application_suite_iot_component:9.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:maximo_application_suite_iot_component:9.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:maximo_application_suite_iot_component:9.0.0:*:*:*:*:*:*:*
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-75881",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-13T13:22:29.970432Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-13T13:48:38.585Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:maximo_application_suite_iot_component:9.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:maximo_application_suite_iot_component:9.1.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:maximo_application_suite_iot_component:9.0.0:*:*:*:*:*:*:*"
          ],
          "product": "Maximo Application Suite - IoT Component",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "9.2.0"
            },
            {
              "status": "affected",
              "version": "9.1.0"
            },
            {
              "status": "affected",
              "version": "9.0.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to an infinite parsing loop when processing certain inputs.\u003c/p\u003e"
            }
          ],
          "value": "IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to an infinite parsing loop when processing certain inputs."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400 Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-12T21:04:27.485Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7290173"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading.\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003e\u003cp\u003eRemediated Product(s)\u003c/p\u003e\u003c/td\u003e\u003ctd\u003eVersion(s)\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Maximo Application Suite - IoT Component\u003c/td\u003e\u003ctd\u003e9.2.3 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Maximo Application Suite - IoT Component\u003c/td\u003e\u003ctd\u003e9.1.15\u00a0 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Maximo Application Suite - IoT Component\u003c/td\u003e\u003ctd\u003e9.0.24\u00a0 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing the vulnerability now by upgrading.\n\n\n\nRemediated Product(s)\n\nVersion(s)IBM Maximo Application Suite - IoT Component9.2.3 or  the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery IBM Maximo Application Suite - IoT Component9.1.15\u00a0 or  the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery IBM Maximo Application Suite - IoT Component9.0.24\u00a0 or  the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery"
        }
      ],
      "title": "IBM Maximo Application Suite - IoT Component Denial of Service"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-75881",
    "datePublished": "2026-10-12T21:01:10.322Z",
    "dateReserved": "2026-08-18T13:04:36.319Z",
    "dateUpdated": "2026-10-13T13:48:38.585Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}