---
title: Maximo Application Suite Security Bulletins
description: Maximo Application Suite (MAS) Upgrade and Bulletin Board
---

[Interloc Solutions Blog ](https://www.interlocsolutions.com/blog)

# [Maximo Application Suite Security Bulletins](https://www.interlocsolutions.com/blog/maximo-application-suite-security-bulletins-1718767812451)

 Written by [Darlene Nerden](https://www.interlocsolutions.com/blog/author/darlene-nerden) | Jun 19, 2024 3:29:22 AM

IBM has released Maximo Application Suite Security Bulletins this week.  The links to the bulletins are below.  The bulletins contain information regarding when, where, and/or how to address the vulnerability. 

 

Security bulletin: Security Bulletin: IBM Maximo Application Suite Predict Component uses IBM WebSphere Application Server Liberty could provide weaker than expected security which is vulnerable to CVE-2023-50312 –  

[https://www.ibm.com/support/pages/node/7157235?myns=swgother&mynp=OCSSLPYA&mync=E&cm_sp=swgother-_-OCSSLPYA-_-E](https://www.ibm.com/support/pages/node/7157235?myns=swgother&mynp=OCSSLPYA&mync=E&cm_sp=swgother-_-OCSSLPYA-_-E) 

 

Security bulletin: Security Bulletin: IBM Maximo Application Suite Predict Component uses IBM WebSphere Application Server Liberty is vulnerable to cross-site scripting (CVE-2024-27270) –  

[https://www.ibm.com/support/pages/node/7157237?myns=swgother&mynp=OCSSLPYA&mync=E&cm_sp=swgother-_-OCSSLPYA-_-E](https://www.ibm.com/support/pages/node/7157237?myns=swgother&mynp=OCSSLPYA&mync=E&cm_sp=swgother-_-OCSSLPYA-_-E) 

 

Security bulletin: Security Bulletin: IBM Maximo Application Suite Predict Component uses: webSphere Application Server Liberty is vulnerable to a server-side request forgery (SSRF) vulnerability which is vulnerable to CVE-2024-22329 –  

[https://www.ibm.com/support/pages/node/7157243?myns=swgother&mynp=OCSSLPYA&mync=E&cm_sp=swgother-_-OCSSLPYA-_-E](https://www.ibm.com/support/pages/node/7157243?myns=swgother&mynp=OCSSLPYA&mync=E&cm_sp=swgother-_-OCSSLPYA-_-E) 

 

Security bulletin: Security Bulletin: IBM Maximo Application Suite Predict Component uses IBM WebSphere Application Server Liberty is vulnerable to a denial of service when using the openidConnectClient-1.0 or socialLogin-1.0 feature which is vulnerable to CVE-2024-22353 –  

[https://www.ibm.com/support/pages/node/7157238?myns=swgother&mynp=OCSSLPYA&mync=E&cm_sp=swgother-_-OCSSLPYA-_-E](https://www.ibm.com/support/pages/node/7157238?myns=swgother&mynp=OCSSLPYA&mync=E&cm_sp=swgother-_-OCSSLPYA-_-E) 

 

Security bulletin: Security Bulletin: IBM Maximo Application Suite Predict Component uses :IBM WebSphere Application Server Liberty is vulnerable to a denial of service due to jose4j which is vulnerable to CVE-2023-51775 – 

[https://www.ibm.com/support/pages/node/7157242?myns=swgother&mynp=OCSSLPYA&mync=E&cm_sp=swgother-_-OCSSLPYA-_-E](https://www.ibm.com/support/pages/node/7157242?myns=swgother&mynp=OCSSLPYA&mync=E&cm_sp=swgother-_-OCSSLPYA-_-E) 

 

Security bulletin: Security Bulletin: IBM Maximo Application Suite Predict Component uses IBM WebSphere Application Server Liberty is vulnerable to an XML External Entity (XXE) injection vulnerability (CVE-2024-22354) –  

[https://www.ibm.com/support/pages/node/7157244?myns=swgother&mynp=OCSSLPYA&mync=E&cm_sp=swgother-_-OCSSLPYA-_-E](https://www.ibm.com/support/pages/node/7157244?myns=swgother&mynp=OCSSLPYA&mync=E&cm_sp=swgother-_-OCSSLPYA-_-E) 

 

Security bulletin: Security Bulletin: IBM Maximo Application Suite Predict Component uses IBM WebSphere Application Server Liberty is vulnerable to a denial of service which is vulnerable to CVE-2024-27268 –  

[https://www.ibm.com/support/pages/node/7157239?myns=swgother&mynp=OCSSLPYA&mync=E&cm_sp=swgother-_-OCSSLPYA-_-E](https://www.ibm.com/support/pages/node/7157239?myns=swgother&mynp=OCSSLPYA&mync=E&cm_sp=swgother-_-OCSSLPYA-_-E) 

 

Security bulletin: Security Bulletin: IBM Maximo Application Suite uses bcprov-jdk18on-1.74.jar which is vulnerable to CVE-2024-30171 –  

[https://www.ibm.com/support/pages/node/7157246?myns=swgother&mynp=OCSSLPYA&mync=E&cm_sp=swgother-_-OCSSLPYA-_-E](https://www.ibm.com/support/pages/node/7157246?myns=swgother&mynp=OCSSLPYA&mync=E&cm_sp=swgother-_-OCSSLPYA-_-E) 

 

Security bulletin: Security Bulletin: IBM Maximo Application Suite Predict Component uses IBM WebSphere Application Server Liberty is vulnerable to a denial of service which is vulnerable to CVE-2024-25026 –  

[https://www.ibm.com/support/pages/node/7157245?myns=swgother&mynp=OCSSLPYA&mync=E&cm_sp=swgother-_-OCSSLPYA-_-E](https://www.ibm.com/support/pages/node/7157245?myns=swgother&mynp=OCSSLPYA&mync=E&cm_sp=swgother-_-OCSSLPYA-_-E) 

 

Security bulletin: Security Bulletin: IBM Maximo Manage application in IBM Maximo Application Suite is vulnerable to sensitive information disclosure (CVE-2024-22333) -  

[https://www.ibm.com/support/pages/node/7157256?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E](https://www.ibm.com/support/pages/node/7157256?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E) 

 

Security bulletin: Security Bulletin: IBM Maximo Application Suite uses follow-redirects-1.15.4.tgz which is vulnerable to CVE-2024-28849 –  

[https://www.ibm.com/support/pages/node/7157659?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E](https://www.ibm.com/support/pages/node/7157659?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E) 

 

Security bulletin: Security Bulletin: IBM Maximo Application Suite uses jose-2.0.6.tgz which is vulnerable to CVE-2024-28176 –  

[https://www.ibm.com/support/pages/node/7157660?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E](https://www.ibm.com/support/pages/node/7157660?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E) 

 

 

**Maximo Asset Management Security Bulletins** 

IBM has released Maximo Asset Management Security Bulletins this week.  The links to the bulletins are below.  The bulletins contain information regarding when, where, and/or how to address the vulnerability. 

 

Security bulletin: Security Bulletin: IBM Maximo Asset Management application is vulnerable to sensitive information disclosure (CVE-2024-22333) –  

[https://www.ibm.com/support/pages/node/7157257?myns=swgother&mynp=OCSSLKT6&mync=E&cm_sp=swgother-_-OCSSLKT6-_-E](https://www.ibm.com/support/pages/node/7157257?myns=swgother&mynp=OCSSLKT6&mync=E&cm_sp=swgother-_-OCSSLKT6-_-E) 

 

Security bulletin: Security Bulletin: Maximo Asset Management - There is a vulnerability in tinymce-6.7.3.min.js used by IBM Maximo Asset Management application (CVE-2024-29881) –  

[https://www.ibm.com/support/pages/node/7157259?myns=swgother&mynp=OCSSLKT6&mync=E&cm_sp=swgother-_-OCSSLKT6-_-E](https://www.ibm.com/support/pages/node/7157259?myns=swgother&mynp=OCSSLKT6&mync=E&cm_sp=swgother-_-OCSSLKT6-_-E) 

 

Security bulletin: Security Bulletin: IBM Maximo Asset Management - There is a vulnerability in tinymce-6.7.3.min.js used by IBM Maximo Asset Management application (CVE-2024-29203) –  

[https://www.ibm.com/support/pages/node/7157258?myns=swgother&mynp=OCSSLKT6&mync=E&cm_sp=swgother-_-OCSSLKT6-_-E](https://www.ibm.com/support/pages/node/7157258?myns=swgother&mynp=OCSSLKT6&mync=E&cm_sp=swgother-_-OCSSLKT6-_-E) 

 

Security bulletin: Security Bulletin: IBM Maximo Asset Management - There is a vulnerability in Java on z/OS used by IBM Maximo Asset Management application (CVE-2024-3933) –  

[https://www.ibm.com/support/pages/node/7157291?myns=swgother&mynp=OCSSLKT6&mync=E&cm_sp=swgother-_-OCSSLKT6-_-E](https://www.ibm.com/support/pages/node/7157291?myns=swgother&mynp=OCSSLKT6&mync=E&cm_sp=swgother-_-OCSSLKT6-_-E) 

[View full post](https://www.interlocsolutions.com/blog/maximo-application-suite-security-bulletins-1718767812451)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Darlene Nerden"
  },
  "dateModified" : "2024-06-19T03:31:28.591Z",
  "datePublished" : "2024-06-19T03:29:22Z",
  "headline" : "Maximo Application Suite Security Bulletins",
  "image" : {
    "@type" : "ImageObject",
    "height" : 60,
    "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
    "width" : 60
  },
  "mainEntityOfPage" : "https://www.interlocsolutions.com/blog/maximo-application-suite-security-bulletins-1718767812451",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60.0,
      "url" : "https://offers.interlocsolutions.com/hubfs/interloc%20solutions%20logo.webp",
      "width" : 211.33759
    },
    "name" : "Interloc Solutions Blog"
  }
}
```