Critical · 9.8 CVE-2025-36386 EUVD-2025-36540GHSA-2hw2-hc6g-cv7v

There is a vulnerability in the IBM Maximo Manage application in IBM Maximo Application Suite for Cognos Analytics

Published Oct 28, 2025 · Updated Oct 28, 2025 · Assigned by ibm

Vendor: IBM Product: IBM Maximo Application Suite

Description

IBM Maximo Application Suite 9.0.0 through 9.0.15 and 9.1.0 through 9.1.4 could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application.

Affected products

Vendor	Product	Affected	Fixed
IBM	IBM Maximo Application Suite	9.0.0 – ≤ 9.0.15, 9.1.0 – ≤ 9.1.4	—

References

https://www.ibm.com/support/pages/node/7249416 vendor-advisory patch