CVE-2023-47718: IBM Maximo Application Suite

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM Maximo Asset Management 7.6.1.3 and Manage Component 8.10 through 8.11 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 271843.

Affected products

• IBM Maximo Application Suite: from 8.10, before 8.10.6 (fixed in 8.10.6); from 8.11, up to and including 8.11.2
• IBM Maximo Asset Management: version 7.6.1.3 only

Published 2024-01-19. Last modified 2026-06-17.