CVE-2025-1500: IBM Maximo Application Suite file upload
IBM Maximo Application Suite 9.0 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened.
Other sources
IBM Maximo Application Suite could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1500?
CVE-2025-1500 is considered a medium severity vulnerability due to the risk of authenticated users uploading and executing dangerous file types.
How do I fix CVE-2025-1500?
To fix CVE-2025-1500, update your IBM Maximo Application Suite to the latest version provided by IBM.
Who is affected by CVE-2025-1500?
CVE-2025-1500 affects users of IBM Maximo Application Suite version 9.0 and earlier.
What types of files are considered dangerous in CVE-2025-1500?
Dangerous file types in CVE-2025-1500 include executable files and scripts that could be executed if opened by another user.
Can CVE-2025-1500 lead to remote code execution?
Yes, CVE-2025-1500 can potentially lead to remote code execution if malicious files are uploaded and run by another authenticated user.