medium4.0
CVE-2025-14684
IBM Maximo Application Suite - Monitor Component 9.1, 9.0, 8.11, and 8.10 could allow an unauthorized user to inject data into log messages due to improper neu…
Impact
IBM Maximo Application Suite - Monitor Component 9.1, 9.0, 8.11, and 8.10 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Maximo Application Suite | from 8.10 before 8.10.26 from 8.11 before 8.11.24 from 9.0 before 9.0.16 from 9.1 before 9.1.6 |