CVE-2024-35144
MEDIUMIBM Maximo Application Suite <9.0 - Info Disclosure
Title source: llmDescription
IBM Maximo Application Suite 8.10, 8.11, and 9.0 - Monitor Component stores source code on the web server that could aid in further attacks against the system.
References (1)
Core 1
Core References
Vendor Advisory
https://www.ibm.com/support/pages/node/7174953
Scores
CVSS v3
5.3
EPSS
0.0014
EPSS Percentile
33.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-540
Status
published
Products (2)
ibm/maximo_application_suite
9.0
ibm/maximo_application_suite
8.10 - 8.10.14
Published
Jan 25, 2025
Tracked Since
Feb 18, 2026