CVE-2021-38924: IBM Maximo Application Suite

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 210163.

Affected products

• IBM Maximo Application Suite: version 8.7 only; version 8.8 only
• IBM Maximo Asset Management: version 7.6.1.1 only; version 7.6.1.2 only

Published 2022-09-14. Last modified 2026-06-17.