Search
Find a vulnerability
Search criteria
10 vulnerabilities found for Maximo AI Service by IBM
CVE-2026-90921 (GCVE-0-2026-90921)
Vulnerability from nvd – Published: 2026-10-12 21:42 – Updated: 2026-10-12 21:43
VLAI
EPSS
VEX
Title
Maximo AI Service Denial of Service
Summary
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process.
Severity
7.5 (High)
CWE
- CWE-130 - Improper Handling of Length Parameter Inconsistency
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7290473 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Maximo AI Service |
Affected:
9.1.0
Affected: 9.2.0 cpe:2.3:a:ibm:maximo_ai_service:9.1.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:maximo_ai_service:9.2.0:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:maximo_ai_service:9.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:maximo_ai_service:9.2.0:*:*:*:*:*:*:*"
],
"product": "Maximo AI Service",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.1.0"
},
{
"status": "affected",
"version": "9.2.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process.\u003c/p\u003e"
}
],
"value": "IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-130",
"description": "CWE-130 Improper Handling of Length Parameter Inconsistency",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-12T21:43:07.931Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7290473"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading\u00a0\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eRemediated Product(s)\u003c/td\u003e\u003ctd\u003eVersion(s)\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMaximo AI Service\u003c/td\u003e\u003ctd\u003e9.1.19 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"noopener noreferrer nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMaximo AI Service\u003c/td\u003e\u003ctd\u003e9.2.3 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"noopener noreferrer nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
}
],
"value": "IBM strongly recommends addressing the vulnerability now by upgrading\u00a0\n\nRemediated Product(s)Version(s)Maximo AI Service9.1.19 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery Maximo AI Service9.2.3 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery"
}
],
"title": "Maximo AI Service Denial of Service"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-90921",
"datePublished": "2026-10-12T21:42:46.414Z",
"dateReserved": "2026-09-14T11:07:15.825Z",
"dateUpdated": "2026-10-12T21:43:07.931Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-90920 (GCVE-0-2026-90920)
Vulnerability from nvd – Published: 2026-10-12 21:43 – Updated: 2026-10-12 21:43
VLAI
EPSS
VEX
Title
Maximo AI Service Code Injection
Summary
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation.
Severity
9.8 (Critical)
CWE
- CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7290833 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Maximo AI Service |
Affected:
9.1.0
Affected: 9.2.0 cpe:2.3:a:ibm:maximo_ai_service:9.1.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:maximo_ai_service:9.2.0:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:maximo_ai_service:9.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:maximo_ai_service:9.2.0:*:*:*:*:*:*:*"
],
"product": "Maximo AI Service",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.1.0"
},
{
"status": "affected",
"version": "9.2.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation.\u003c/p\u003e"
}
],
"value": "IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-12T21:43:33.003Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7290833"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading\u00a0\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eRemediated Product(s)\u003c/td\u003e\u003ctd\u003eVersion(s)\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMaximo AI Service\u003c/td\u003e\u003ctd\u003e9.1.19 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"noopener noreferrer nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMaximo AI Service\u003c/td\u003e\u003ctd\u003e9.2.3 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"noopener noreferrer nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
}
],
"value": "IBM strongly recommends addressing the vulnerability now by upgrading\u00a0\n\nRemediated Product(s)Version(s)Maximo AI Service9.1.19 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery Maximo AI Service9.2.3 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery"
}
],
"title": "Maximo AI Service Code Injection"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-90920",
"datePublished": "2026-10-12T21:43:33.003Z",
"dateReserved": "2026-09-14T11:05:19.026Z",
"dateUpdated": "2026-10-12T21:43:33.003Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-90912 (GCVE-0-2026-90912)
Vulnerability from nvd – Published: 2026-10-12 21:43 – Updated: 2026-10-12 21:43
VLAI
EPSS
VEX
Title
Maximo AI Service Denial of Service
Summary
IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion.
Severity
7.5 (High)
CWE
- CWE-674 - Uncontrolled Recursion
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7290473 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Maximo AI Service |
Affected:
9.1.0
Affected: 9.2.0 cpe:2.3:a:ibm:maximo_ai_service:9.1.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:maximo_ai_service:9.2.0:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:maximo_ai_service:9.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:maximo_ai_service:9.2.0:*:*:*:*:*:*:*"
],
"product": "Maximo AI Service",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.1.0"
},
{
"status": "affected",
"version": "9.2.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion.\u003c/p\u003e"
}
],
"value": "IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-674",
"description": "CWE-674 Uncontrolled Recursion",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-12T21:43:46.968Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7290473"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading\u00a0\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eRemediated Product(s)\u003c/td\u003e\u003ctd\u003eVersion(s)\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMaximo AI Service\u003c/td\u003e\u003ctd\u003e9.1.19 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"noopener noreferrer nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMaximo AI Service\u003c/td\u003e\u003ctd\u003e9.2.3 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"noopener noreferrer nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
}
],
"value": "IBM strongly recommends addressing the vulnerability now by upgrading\u00a0\n\nRemediated Product(s)Version(s)Maximo AI Service9.1.19 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery Maximo AI Service9.2.3 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery"
}
],
"title": "Maximo AI Service Denial of Service"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-90912",
"datePublished": "2026-10-12T21:43:46.968Z",
"dateReserved": "2026-09-14T11:03:58.375Z",
"dateUpdated": "2026-10-12T21:43:46.968Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-90911 (GCVE-0-2026-90911)
Vulnerability from nvd – Published: 2026-10-12 21:43 – Updated: 2026-10-12 21:43
VLAI
EPSS
VEX
Title
Maximo AI Service Denial of Service
Summary
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.
Severity
7.5 (High)
CWE
- CWE-400 - Uncontrolled Resource Consumption
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7290473 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Maximo AI Service |
Affected:
9.1.0
Affected: 9.2.0 cpe:2.3:a:ibm:maximo_ai_service:9.1.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:maximo_ai_service:9.2.0:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:maximo_ai_service:9.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:maximo_ai_service:9.2.0:*:*:*:*:*:*:*"
],
"product": "Maximo AI Service",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.1.0"
},
{
"status": "affected",
"version": "9.2.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.\u003c/p\u003e"
}
],
"value": "IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "CWE-400 Uncontrolled Resource Consumption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-12T21:43:59.019Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7290473"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading\u00a0\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eRemediated Product(s)\u003c/td\u003e\u003ctd\u003eVersion(s)\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMaximo AI Service\u003c/td\u003e\u003ctd\u003e9.1.19 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"noopener noreferrer nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMaximo AI Service\u003c/td\u003e\u003ctd\u003e9.2.3 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"noopener noreferrer nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
}
],
"value": "IBM strongly recommends addressing the vulnerability now by upgrading\u00a0\n\nRemediated Product(s)Version(s)Maximo AI Service9.1.19 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery Maximo AI Service9.2.3 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery"
}
],
"title": "Maximo AI Service Denial of Service"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-90911",
"datePublished": "2026-10-12T21:43:59.019Z",
"dateReserved": "2026-09-14T11:01:15.381Z",
"dateUpdated": "2026-10-12T21:43:59.019Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-78673 (GCVE-0-2026-78673)
Vulnerability from nvd – Published: 2026-10-12 21:01 – Updated: 2026-10-12 21:04
VLAI
EPSS
VEX
Title
Maximo AI Service Improper Input Validation
Summary
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation.
Severity
7.5 (High)
CWE
- CWE-20 - Improper Input Validation
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7290473 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Maximo AI Service |
Affected:
9.1.0
Affected: 9.2.0 cpe:2.3:a:ibm:maximo_ai_service:9.1.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:maximo_ai_service:9.2.0:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:maximo_ai_service:9.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:maximo_ai_service:9.2.0:*:*:*:*:*:*:*"
],
"product": "Maximo AI Service",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.1.0"
},
{
"status": "affected",
"version": "9.2.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation.\u003c/p\u003e"
}
],
"value": "IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20 Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-12T21:04:46.890Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7290473"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading\u00a0\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eRemediated Product(s)\u003c/td\u003e\u003ctd\u003eVersion(s)\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMaximo AI Service\u003c/td\u003e\u003ctd\u003e9.1.19 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"noopener noreferrer nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMaximo AI Service\u003c/td\u003e\u003ctd\u003e9.2.3 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"noopener noreferrer nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
}
],
"value": "IBM strongly recommends addressing the vulnerability now by upgrading\u00a0\n\nRemediated Product(s)Version(s)Maximo AI Service9.1.19 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery Maximo AI Service9.2.3 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery"
}
],
"title": "Maximo AI Service Improper Input Validation"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-78673",
"datePublished": "2026-10-12T21:01:06.397Z",
"dateReserved": "2026-08-25T00:48:36.774Z",
"dateUpdated": "2026-10-12T21:04:46.890Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-90911 (GCVE-0-2026-90911)
Vulnerability from cvelistv5 – Published: 2026-10-12 21:43 – Updated: 2026-10-12 21:43
VLAI
EPSS
VEX
Title
Maximo AI Service Denial of Service
Summary
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.
Severity
7.5 (High)
CWE
- CWE-400 - Uncontrolled Resource Consumption
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7290473 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Maximo AI Service |
Affected:
9.1.0
Affected: 9.2.0 cpe:2.3:a:ibm:maximo_ai_service:9.1.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:maximo_ai_service:9.2.0:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:maximo_ai_service:9.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:maximo_ai_service:9.2.0:*:*:*:*:*:*:*"
],
"product": "Maximo AI Service",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.1.0"
},
{
"status": "affected",
"version": "9.2.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.\u003c/p\u003e"
}
],
"value": "IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "CWE-400 Uncontrolled Resource Consumption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-12T21:43:59.019Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7290473"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading\u00a0\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eRemediated Product(s)\u003c/td\u003e\u003ctd\u003eVersion(s)\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMaximo AI Service\u003c/td\u003e\u003ctd\u003e9.1.19 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"noopener noreferrer nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMaximo AI Service\u003c/td\u003e\u003ctd\u003e9.2.3 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"noopener noreferrer nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
}
],
"value": "IBM strongly recommends addressing the vulnerability now by upgrading\u00a0\n\nRemediated Product(s)Version(s)Maximo AI Service9.1.19 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery Maximo AI Service9.2.3 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery"
}
],
"title": "Maximo AI Service Denial of Service"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-90911",
"datePublished": "2026-10-12T21:43:59.019Z",
"dateReserved": "2026-09-14T11:01:15.381Z",
"dateUpdated": "2026-10-12T21:43:59.019Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-90912 (GCVE-0-2026-90912)
Vulnerability from cvelistv5 – Published: 2026-10-12 21:43 – Updated: 2026-10-12 21:43
VLAI
EPSS
VEX
Title
Maximo AI Service Denial of Service
Summary
IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion.
Severity
7.5 (High)
CWE
- CWE-674 - Uncontrolled Recursion
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7290473 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Maximo AI Service |
Affected:
9.1.0
Affected: 9.2.0 cpe:2.3:a:ibm:maximo_ai_service:9.1.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:maximo_ai_service:9.2.0:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:maximo_ai_service:9.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:maximo_ai_service:9.2.0:*:*:*:*:*:*:*"
],
"product": "Maximo AI Service",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.1.0"
},
{
"status": "affected",
"version": "9.2.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion.\u003c/p\u003e"
}
],
"value": "IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-674",
"description": "CWE-674 Uncontrolled Recursion",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-12T21:43:46.968Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7290473"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading\u00a0\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eRemediated Product(s)\u003c/td\u003e\u003ctd\u003eVersion(s)\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMaximo AI Service\u003c/td\u003e\u003ctd\u003e9.1.19 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"noopener noreferrer nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMaximo AI Service\u003c/td\u003e\u003ctd\u003e9.2.3 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"noopener noreferrer nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
}
],
"value": "IBM strongly recommends addressing the vulnerability now by upgrading\u00a0\n\nRemediated Product(s)Version(s)Maximo AI Service9.1.19 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery Maximo AI Service9.2.3 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery"
}
],
"title": "Maximo AI Service Denial of Service"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-90912",
"datePublished": "2026-10-12T21:43:46.968Z",
"dateReserved": "2026-09-14T11:03:58.375Z",
"dateUpdated": "2026-10-12T21:43:46.968Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-90920 (GCVE-0-2026-90920)
Vulnerability from cvelistv5 – Published: 2026-10-12 21:43 – Updated: 2026-10-12 21:43
VLAI
EPSS
VEX
Title
Maximo AI Service Code Injection
Summary
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation.
Severity
9.8 (Critical)
CWE
- CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7290833 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Maximo AI Service |
Affected:
9.1.0
Affected: 9.2.0 cpe:2.3:a:ibm:maximo_ai_service:9.1.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:maximo_ai_service:9.2.0:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:maximo_ai_service:9.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:maximo_ai_service:9.2.0:*:*:*:*:*:*:*"
],
"product": "Maximo AI Service",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.1.0"
},
{
"status": "affected",
"version": "9.2.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation.\u003c/p\u003e"
}
],
"value": "IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-12T21:43:33.003Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7290833"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading\u00a0\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eRemediated Product(s)\u003c/td\u003e\u003ctd\u003eVersion(s)\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMaximo AI Service\u003c/td\u003e\u003ctd\u003e9.1.19 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"noopener noreferrer nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMaximo AI Service\u003c/td\u003e\u003ctd\u003e9.2.3 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"noopener noreferrer nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
}
],
"value": "IBM strongly recommends addressing the vulnerability now by upgrading\u00a0\n\nRemediated Product(s)Version(s)Maximo AI Service9.1.19 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery Maximo AI Service9.2.3 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery"
}
],
"title": "Maximo AI Service Code Injection"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-90920",
"datePublished": "2026-10-12T21:43:33.003Z",
"dateReserved": "2026-09-14T11:05:19.026Z",
"dateUpdated": "2026-10-12T21:43:33.003Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-90921 (GCVE-0-2026-90921)
Vulnerability from cvelistv5 – Published: 2026-10-12 21:42 – Updated: 2026-10-12 21:43
VLAI
EPSS
VEX
Title
Maximo AI Service Denial of Service
Summary
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process.
Severity
7.5 (High)
CWE
- CWE-130 - Improper Handling of Length Parameter Inconsistency
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7290473 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Maximo AI Service |
Affected:
9.1.0
Affected: 9.2.0 cpe:2.3:a:ibm:maximo_ai_service:9.1.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:maximo_ai_service:9.2.0:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:maximo_ai_service:9.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:maximo_ai_service:9.2.0:*:*:*:*:*:*:*"
],
"product": "Maximo AI Service",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.1.0"
},
{
"status": "affected",
"version": "9.2.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process.\u003c/p\u003e"
}
],
"value": "IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-130",
"description": "CWE-130 Improper Handling of Length Parameter Inconsistency",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-12T21:43:07.931Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7290473"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading\u00a0\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eRemediated Product(s)\u003c/td\u003e\u003ctd\u003eVersion(s)\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMaximo AI Service\u003c/td\u003e\u003ctd\u003e9.1.19 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"noopener noreferrer nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMaximo AI Service\u003c/td\u003e\u003ctd\u003e9.2.3 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"noopener noreferrer nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
}
],
"value": "IBM strongly recommends addressing the vulnerability now by upgrading\u00a0\n\nRemediated Product(s)Version(s)Maximo AI Service9.1.19 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery Maximo AI Service9.2.3 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery"
}
],
"title": "Maximo AI Service Denial of Service"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-90921",
"datePublished": "2026-10-12T21:42:46.414Z",
"dateReserved": "2026-09-14T11:07:15.825Z",
"dateUpdated": "2026-10-12T21:43:07.931Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-78673 (GCVE-0-2026-78673)
Vulnerability from cvelistv5 – Published: 2026-10-12 21:01 – Updated: 2026-10-12 21:04
VLAI
EPSS
VEX
Title
Maximo AI Service Improper Input Validation
Summary
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation.
Severity
7.5 (High)
CWE
- CWE-20 - Improper Input Validation
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7290473 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Maximo AI Service |
Affected:
9.1.0
Affected: 9.2.0 cpe:2.3:a:ibm:maximo_ai_service:9.1.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:maximo_ai_service:9.2.0:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:maximo_ai_service:9.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:maximo_ai_service:9.2.0:*:*:*:*:*:*:*"
],
"product": "Maximo AI Service",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.1.0"
},
{
"status": "affected",
"version": "9.2.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation.\u003c/p\u003e"
}
],
"value": "IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20 Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-12T21:04:46.890Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7290473"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading\u00a0\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eRemediated Product(s)\u003c/td\u003e\u003ctd\u003eVersion(s)\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMaximo AI Service\u003c/td\u003e\u003ctd\u003e9.1.19 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"noopener noreferrer nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eMaximo AI Service\u003c/td\u003e\u003ctd\u003e9.2.3 or \u003ca href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery\" rel=\"noopener noreferrer nofollow\"\u003ethe latest (available from the Catalog under Update Available)\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
}
],
"value": "IBM strongly recommends addressing the vulnerability now by upgrading\u00a0\n\nRemediated Product(s)Version(s)Maximo AI Service9.1.19 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery Maximo AI Service9.2.3 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery"
}
],
"title": "Maximo AI Service Improper Input Validation"
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-78673",
"datePublished": "2026-10-12T21:01:06.397Z",
"dateReserved": "2026-08-25T00:48:36.774Z",
"dateUpdated": "2026-10-12T21:04:46.890Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}