Medium · 4.0 CVE-2025-14684 EUVD-2025-209038

IBM Maximo Application Suite - Monitor Component uses Log Forging which is vulnerable to .

Published Mar 25, 2026 · Updated Mar 28, 2026 · Assigned by ibm

Vendor: IBM Product: Maximo Application Suite - Monitor Component

Description

IBM Maximo Application Suite - Monitor Component 9.1, 9.0, 8.11, and 8.10 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.

Affected products

Vendor	Product	Affected	Fixed
IBM	Maximo Application Suite - Monitor Component	9.1, 9.0, 8.11, 8.10	—

References

https://www.ibm.com/support/pages/node/7267481 vendor-advisory patch