High · 7.5 CVE-2025-2898 EUVD-2025-13597GHSA-5wcf-r54j-7xp9

IBM Maximo Application Suite privilege escalation

Published May 6, 2025 · Updated Feb 26, 2026 · Assigned by ibm

Vendor: IBM Product: Maximo Application Suite

Description

IBM Maximo Application Suite 9.0 could allow an attacker with some level of access to elevate their privileges due to a security configuration vulnerability in Role-Based Access Control (RBAC) configurations.

Affected products

Vendor	Product	Affected	Fixed
IBM	Maximo Application Suite	9.0	—

References

https://https://www.ibm.com/support/pages/node/7232050 vendor-advisory patch