PT-2026-28131 · Ibm · Ibm Maximo Application Suite+1

Publicado 2026-03-25 · Atualizado 2026-03-26 · CVE-2025-14684

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Maximo Application Suite - Monitor Component versions 9.1, 9.0, 8.11, and 8.10

Description The software allows an unauthorized user to inject data into log messages because of insufficient sanitization of special characters when writing to log files. This issue is referred to as Log Forging.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Correção

Enumeração de Fraquezas

CWE-117

Identificadores relacionados

CVE-2025-14684

Produtos afetados

Ibm Maximo Application Suite

Monitorr

Referências · 5

• https://twitter.com/infoflowcloud/status/2037139163842035861 · Publicação no Twitter
• https://twitter.com/cyberbivash/status/2036957517327065141 · Publicação no Twitter
• https://ibm.com/support/pages/node/7267481 · Correção, Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-14684 · Nota de Segurança
• https://twitter.com/CVEnew/status/2037137799900528659 · Publicação no Twitter