CVE-2025-14684CWE-117

IBM Maximo Application Suite - Monitor Component uses Log Forging which is vulnerable to .

Medium · published March 25, 2026

CVSS v3.1
4.0
EPSS
0%
Percentile
2.8
In the wild
Unconfirmed
What it is

IBM Maximo Application Suite - Monitor Component 9.1, 9.0, 8.11, and 8.10 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.

The record
Technical detail
CVSS v3.1
4.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00137 · 2.8th percentile
Weakness
CWE-117 · Improper Output Neutralization for Logs
Published
2026-03-25T21:22Z
EPSS history
Timeline
  • 25 MAR 21:22Z
    IBM Maximo Application Suite - Monitor Component uses Log Forging which is vulnerable to .
    cvelistv5