CVE-2024-35148

published 2025-01-25

CVE-2024-35148: IBM Maximo Application Suite 8.10.10, 8.11.7, and 9.0 - Monitor Component is vulnerable to SQL injection. A remote attacker could send specially crafted SQL…

high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

IBM Maximo Application Suite 8.10.10, 8.11.7, and 9.0 - Monitor Component is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	maximo_application_suite	—	—
ibm	maximo_application_suite	—	—
ibm	maximo_application_suite	—	—
ibm	maximo_application_suite	—	—

CWE-89