CVE-2023-32335

LOW

IBM Maximo Application Suite - Information Disclosure

Title source: rule
STIX 2.1

Description

IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 255075.

References (3)

Scores

CVSS v3 3.7
EPSS 0.0008
EPSS Percentile 22.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-598
Status published
Products (3)
ibm/maximo_application_suite 8.10
ibm/maximo_application_suite 8.11
ibm/maximo_asset_management 7.6.1.3
Published Mar 13, 2024
Tracked Since Feb 18, 2026