CVE-2025-2898

概要

参考情報

• https//www.ibm.com/support/pages/node/7232050 · Vendor Advisory
• ibm.com/support/pages/node/7232050 · Vendor Advisory

maximo application suite のその他の脆弱性

• CVE-2026-18531中 5.3IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session data due to the use of a weak HMAC sessi…
• CVE-2026-15656中 4.3IBM Maximo Application Suite 9.2, 9.1, and 9.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may b…
• CVE-2026-4820中 4.3IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on authorization tokens or session cookies. Attacker…
• CVE-2025-14684低 3.3IBM Maximo Application Suite - Monitor Component 9.1, 9.0, 8.11, and 8.10 could allow an unauthorized user to inject data into log messages …
• CVE-2025-36386緊急 9.8IBM Maximo Application Suite 9.0.0 through 9.0.15 and 9.1.0 through 9.1.4 could allow a remote attacker to bypass authentication mechanisms …