PT-2025-15047 · Ibm · Ibm Maximo Application Suite

Kapil Khot · Published 2025-04-05 · Updated 2025-07-08 · CVE-2025-1500

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Maximo Application Suite version 9.0

Description The issue allows an authenticated user to upload a file with dangerous types that could be executed by another user if opened.

Recommendations For IBM Maximo Application Suite version 9.0, consider restricting file upload capabilities to prevent the upload of dangerous file types until a fix is available. As a temporary workaround, limit access to file uploads to trusted users and ensure that all uploaded files are thoroughly scanned for malicious content.

Fix

LPE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BDU:2025-05348

CVE-2025-1500

Affected Products

Ibm Maximo Application Suite

References · 9

• https://osv.dev/vulnerability/CVE-2025-1500 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05348 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-1500 · Security Note
• https://ibm.com/support/pages/node/7230140 · Vendor Advisory, Patch
• https://t.me/cvetracker/20876 · Telegram Post
• https://twitter.com/CVEnew/status/1908438437939552468 · Twitter Post
• https://t.me/cvenotify/128072 · Telegram Post
• https://t.me/cvenotify/117927 · Telegram Post
• https://t.me/cvedetector/22174 · Telegram Post