Maximo Application Suite (8.10, 8.11, 9.0, 9.1, 9.2)

IBM Maximo Application Suite versions 8.10 through 9.2 are susceptible to unauthenticated directory traversal, allowing remote attackers to read arbitrary files via crafted URL requests.