CVE-2025-2987: IBM Maximo Asset Management server-side request forgery
IBM Maximo Asset Management 7.6.1.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Other sources
IBM Maximo Asset Management is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2987?
CVE-2025-2987 is considered a high severity vulnerability due to its potential for server-side request forgery allowing unauthorized requests.
How do I fix CVE-2025-2987?
To mitigate CVE-2025-2987, upgrade IBM Maximo Asset Management to version 7.6.1.4 or later.
Who is affected by CVE-2025-2987?
IBM Maximo Asset Management versions up to and including 7.6.1.3 are affected by CVE-2025-2987.
What impact can CVE-2025-2987 have on my network?
CVE-2025-2987 may allow an authenticated attacker to perform unauthorized requests, which could lead to network enumeration and further attacks.
Is authentication required to exploit CVE-2025-2987?
Yes, an authenticated attacker can exploit CVE-2025-2987 to send unauthorized requests from the system.