CVE-2024-22333
IBM Maximo Asset Management 7.6.1.3 and IBM Maximo Application Suite 8.10 and 8.11 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 279973.
Scoring
- Severity
- LOW
- CVSS base score
- 3.3
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- EPSS probability
- 0.18%
- CWE
- CWE-525
- Published
- 2024-06-13
- Last modified
- 2026-03-13
Affected products
- IBM Maximo Application Suite
- IBM Maximo Asset Management
Weakness type
Related vulnerabilities
- CVE-2026-13697 — undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives
- CVE-2024-23571 — HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate...
- CVE-2026-41918 — A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0)....
- CVE-2026-41322 — @astrojs/node: Cache Poisoning due to incorrect error handling when if-match header is malformed
- CVE-2025-15554 — Admin Passwords Cached by Browsers in Truesec LAPSWebUI
- CVE-2025-36364 — IBM DevOps Plan REST APIs are vulnerable to exposure of sensitive data through request query parameters.
- CVE-2026-27514 — Tenda F3 Plaintext Credential Exposure in Configuration Download
- CVE-2026-24437 — Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages