PT-2026-28131 · Ibm · Monitorr+1

Published 2026-03-25 · Updated 2026-03-26 · CVE-2025-14684

Positive Technologies · (AI Summary)

CVSS v3.1

4.0

Medium

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Maximo Application Suite - Monitor Component versions 9.1, 9.0, 8.11, and 8.10

Description The software allows an unauthorized user to inject data into log messages because of insufficient sanitization of special characters when writing to log files. This issue is referred to as Log Forging.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Fix

Weakness Enumeration

CWE-117

Related Identifiers

CVE-2025-14684

Affected Products

Ibm Maximo Application Suite

Monitorr

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-14684 · Security Note
• https://twitter.com/CVEnew/status/2037137799900528659 · Twitter Post
• https://ibm.com/support/pages/node/7267481 · Patch, Vendor Advisory
• https://twitter.com/cyberbivash/status/2036957517327065141 · Twitter Post