CVE-2026-18517: IBM Maximo Application Suite - Location Service for Esri Component Improper Access Control
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Suite — Location Service for Esri Component is vulnerable to unintended network egress due to a misconfigured Kubernetes NetworkPolicy.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Maximo Application Suite - Location Service for Esri Componentto a version that resolves this vulnerability.Fixed in 9.2.3 - Upgrade
Upgrade
IBM Maximo Application Suite - Location Service for Esri Componentto a version that resolves this vulnerability.Fixed in 9.1.13 - Upgrade
Upgrade
IBM Maximo Application Suite - Location Service for Esri Componentto a version that resolves this vulnerability.Fixed in 9.0.14
Event History
Frequently Asked Questions
Which releases should be assessed for exposure?
The affected releases listed are 9.0, 9.1, and 9.2 of IBM Maximo Application Suite - Location Service for Esri Component.
What level of access does exploitation require?
The CVSS vector indicates network-based exploitation with low privileges required and no user interaction. It also indicates low attack complexity.
What is the indicated security impact?
The CVSS vector indicates high confidentiality impact, with no integrity or availability impact indicated. It also indicates that the vulnerability can affect a different security scope.