CVE-2025-2898

Mô tả

Tham khảo

• https//www.ibm.com/support/pages/node/7232050 · Vendor Advisory
• ibm.com/support/pages/node/7232050 · Vendor Advisory

Lỗ hổng khác của maximo application suite

• CVE-2026-18531TRUNG BÌNH 5.3IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session data due to the use of a weak HMAC sessi…
• CVE-2026-15656TRUNG BÌNH 4.3IBM Maximo Application Suite 9.2, 9.1, and 9.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may b…
• CVE-2026-4820TRUNG BÌNH 4.3IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on authorization tokens or session cookies. Attacker…
• CVE-2025-14684THẤP 3.3IBM Maximo Application Suite - Monitor Component 9.1, 9.0, 8.11, and 8.10 could allow an unauthorized user to inject data into log messages …
• CVE-2025-36386NGHIÊM TRỌNG 9.8IBM Maximo Application Suite 9.0.0 through 9.0.15 and 9.1.0 through 9.1.4 could allow a remote attacker to bypass authentication mechanisms …