CVE-2026-18513: IBM Maximo Application Suite - Location Service for Esri Component Improper Privilege Management
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper access control due to a schema-less Custom Resource Definition.
Other sources
IBM Maximo Application Suite - Location Service for Esri Component is vulnerable to improper access control due to a schema-less Custom Resource Definition.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Maximo Application Suite - Location Service for Esri Componentto a version that resolves this vulnerability.Fixed in 9.2.3 - Upgrade
Upgrade
IBM Maximo Application Suite - Location Service for Esri Componentto a version that resolves this vulnerability.Fixed in 9.1.13 - Upgrade
Upgrade
IBM Maximo Application Suite - Location Service for Esri Componentto a version that resolves this vulnerability.Fixed in 9.0.14
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The severity vector indicates that an attacker needs high privileges. Exploitation does not require user interaction and can be performed over the network.
What is the potential impact if the vulnerability is exploited?
The severity vector rates confidentiality, integrity, and availability impact as high. An attacker who meets the privilege requirement could potentially affect all three security properties.
Which releases are identified as affected?
The affected releases listed are 9.0, 9.1, and 9.2 of IBM Maximo Application Suite - Location Service for Esri Component.