CVE-2024-22333: ibm maximo application suite
CVSS: 3.3v3.1LowModified
Published 13-06-2024Last modified 24-08-2024
Vulnerability summary
CVE-2024-22333 is a low (CVSS 3.3) vulnerability in ibm maximo application suite. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 7.2% of scored vulnerabilities.
CVSS score
3.3/10
010
Low · v3.1 (CVE.org)EPSS score
0.18%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 13-06-2024PublishedVulnerability first disclosed.
- 24-08-2024Last modifiedVulnerability information updated.
Description
IBM Maximo Asset Management 7.6.1.3 and IBM Maximo Application Suite 8.10 and 8.11 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 279973.
CVSS metrics
2 scores · 2 sources · 1 versionLow 3.3Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NSourcesAll 2 agree
- NVDNIST3.3LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS trend
Probability
0.18%
Chance of exploitation in the next 30 days
Percentile
7%
Versus all other CVEs
30-day change
0.00 pp
From 0.18% on 21-09-2026
21-09-202621-10-2026
EPSS score0.18%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-525Use of Web Browser Cache Containing Sensitive InformationThe web application does not use an appropriate caching policy that specifies the extent to which each web page and associated form fields should be cached.
- CWE-668Exposure of Resource to Wrong SphereThe product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
Affected systems
Ibm2 products
- maximo application suite8.10, 8.11 | 8.10 | 8.11
- maximo_asset_management7.6.1.3
1 vendor · 2 products
References
3 links- www.ibm.com/support/pages/node/7157256Vendor Advisory
- www.ibm.com/support/pages/node/7157257Vendor Advisory