Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

IBM Maximo Application Suite - Monitor ComponentIBM Maximo Application Suite - Monitor Component uses Log Forging which is vulnerable to .

Risk 21
Severity
4
AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

IBM Maximo Application Suite - Monitor Component 9.1, 9.0, 8.11, and 8.10 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.

1 / 2
Source: MITRE

Remedy

Remediated Product(s)Version(s)IBM Maximo Application Suite - Monitor Component9.1.6 (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery IBM Maximo Application Suite - Monitor Component9.0.16 (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery IBM Maximo Application Suite - Monitor Component8.11.24 (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery IBM Maximo Application Suite - Monitor Component8.10.26 (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery
First published (updated )
CVE-2025-14684

IBM Maximo Application Suite information disclosure

Risk 27
Severity
5.3
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

IBM Maximo Application Suite - Monitor Component stores source code on the web server that could aid in further attacks against the system.

1 / 2
Source: IBM
First published (updated )
CVE-2024-35144

IBM Maximo Application Suite was vulnerable to because Cookie ltpatoken2_<workspace_name> was not set with secure flag

Risk 16
Severity
4.3
EPSS
0.01%
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.

1 / 2
Source: MITRE

Remedy

Remediated Product(s)Version(s)IBM Maximo Application Suite9.1.8IBM Maximo Application Suite9.0.19IBM Maximo Application Suite8.11.30IBM Maximo Application Suite8.10.33
First published (updated )
CVE-2026-4820

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203