Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Advisory: IBM Maximo Application Suite - Location Service for Esri Component — ibm.com/support/pages/node/7290070 Clear all filters
TI-2026-71303 CVE-2026-18513 · GHSA-472q-p8qv-fcm5

Improper privilege management in IBM Maximo Location Service for Esri

Priority LOW 33

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper access control due to a schema-less Custom Resource Definition.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00257 Published 2026-10-12 No fix listed CWE-269
TI-2026-71304 CVE-2026-18517 · GHSA-hqr3-7568-m6rp

Unintended network egress in IBM Maximo Location Service for Esri

Priority LOW 33

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Suite — Location Service for Esri Component is vulnerable to unintended network egress due to a misconfigured Ku…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00201 Published 2026-10-12 No fix listed CWE-284
TI-2026-71305 CVE-2026-18529 · GHSA-x88v-wqgp-4r5r

OS command injection in IBM Maximo Location Service for Esri

Priority MEDIUM 41

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection due to improper sanitisation of a user-controlled value passed to a shell command in a Kubernetes op…

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.00672 Published 2026-10-12 No fix listed CWE-78
TI-2026-71306 CVE-2026-18533 · GHSA-7gm3-8m2r-hf4g

Code injection in IBM Maximo Location Service for Esri

Priority LOW 30

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image configuration in a Kubernetes operator template.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00234 Published 2026-10-12 No fix listed CWE-94
TI-2026-71307 CVE-2026-18537 · GHSA-vfmw-qfgh-4p23

Code injection in IBM Maximo Location Service for Esri component

Priority LOW 39

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image reference in a Kubernetes operator template.

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.00234 Published 2026-10-12 No fix listed CWE-94