4.0
Medium
CVE-2025-14684 IBM Maximo Application Suite - Monitor Component 9.1, 9.0, 8.11, and 8.10 could allow an unauthorized user to inject…
Description
IBM Maximo Application Suite - Monitor Component 9.1, 9.0, 8.11, and 8.10 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Maximo Application Suite - Monitor Component | 9.1 | No fix stated |
| Maximo Application Suite - Monitor Component | 9.0 | No fix stated |
| Maximo Application Suite - Monitor Component | 8.11 | No fix stated |
| Maximo Application Suite - Monitor Component | 8.10 | No fix stated |