CVE-2023-43037

CWE-20 — Improper Input Validation3 documents3 sources
Severity
6.5MEDIUM
EPSS
0.2%
top 60.33%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Maximo Application Suite
Timeline
PublishedApr 10

Description

IBM Maximo Application Suite 8.11 and 9.0 could allow an authenticated user to perform unauthorized actions due to improper input validation.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶NVDibm/maximo_application_suite8.11 — 8.11.13+1
▶CVEListV5ibm/maximo_application_suite8.11, 9.0+1

🔴Vulnerability Details

2
CVEList
IBM Maximo Application Suite improper access control↗2025-04-10
▶
GHSA
GHSA-j7x3-2vm7-xq7f: IBM Maximo Application Suite 8↗2025-04-10
▶
CVE-2023-43037 (MEDIUM CVSS 6.5) | IBM Maximo Application Suite 8.11 a | cvebase.io