Ibm · Ibm Maximo Asset Management · CVE-2025-2986
**Name of the Vulnerable Software and Affected Versions**
IBM Maximo Asset Management version 7.6.1.3
**Description**
The issue allows a privileged user to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a trusted session. This is due to a stored cross-site scripting issue.
**Recommendations**
For IBM Maximo Asset Management version 7.6.1.3, consider restricting access to the Web UI until a fix is available, and avoid using the Web UI with privileged accounts to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.