CVE-2025-2986

概要

参考情報

• ibm.com/support/pages/node/7231785 · Vendor Advisory

maximo asset management のその他の脆弱性

• CVE-2025-2987中 5.4IBM Maximo Asset Management 7.6.1.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send un…
• CVE-2024-45077中 6.5IBM Maximo Asset Management 7.6.1.3 MXAPIASSET API is vulnerable to unrestricted file upload which allows authenticated low privileged user …
• CVE-2024-45652高 7.5IBM Maximo MXAPIASSET API 7.6.1.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially cr…
• CVE-2024-45088中 5.4IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arb…
• CVE-2024-22333低 3.3IBM Maximo Asset Management 7.6.1.3 and IBM Maximo Application Suite 8.10 and 8.11 allows web pages to be stored locally which can be read b…