CVE-2025-14684

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-14684", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2025-12-13T20:24:32.826Z", "datePublished": "2026-03-25T21:22:44.935Z", "dateUpdated": "2026-03-28T01:49:31.469Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-03-25T21:22:44.935Z"}, "title": "IBM Maximo Application Suite - Monitor Component uses Log Forging which is vulnerable to .", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-117", "description": "CWE-117 Improper Output Neutralization for Logs", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "Maximo Application Suite - Monitor Component", "versions": [{"status": "affected", "version": "9.1"}, {"status": "affected", "version": "9.0"}, {"status": "affected", "version": "8.11"}, {"status": "affected", "version": "8.10"}], "cpes": ["cpe:2.3:a:ibm:maximo_application_suite___monitor_component:9.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite___monitor_component:9.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite___monitor_component:9.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite___monitor_component:9.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite___monitor_component:8.11:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite___monitor_component:8.11.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite___monitor_component:8.10:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite___monitor_component:8.10.0:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM Maximo Application Suite - Monitor Component 9.1, 9.0, 8.11, and 8.10 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM Maximo Application Suite - Monitor Component 9.1, 9.0, 8.11, and 8.10 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7267481", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 4, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}}], "solutions": [{"lang": "en", "value": "Remediated Product(s)Version(s)IBM Maximo Application Suite - Monitor Component9.1.6\n (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery IBM Maximo Application Suite - Monitor Component9.0.16\n (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery IBM Maximo Application Suite - Monitor Component8.11.24\n (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery IBM Maximo Application Suite - Monitor Component8.10.26\n (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p><br></p><table><tbody><tr><td>Remediated Product(s)</td><td>Version(s)</td></tr><tr><td>IBM Maximo Application Suite - Monitor Component</td><td>9.1.6<br><a href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery?topic=upgrading\" rel=\"nofollow\">(available from the Catalog under Update Available)</a></td></tr><tr><td>IBM Maximo Application Suite - Monitor Component</td><td>9.0.16<br><a href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery?topic=upgrading\" rel=\"nofollow\">(available from the Catalog under Update Available)</a></td></tr><tr><td>IBM Maximo Application Suite - Monitor Component</td><td>8.11.24<br><a href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery?topic=upgrading\" rel=\"nofollow\">(available from the Catalog under Update Available)</a></td></tr><tr><td>IBM Maximo Application Suite - Monitor Component</td><td>8.10.26<br><a href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery?topic=upgrading\" rel=\"nofollow\">(available from the Catalog under Update Available)</a></td></tr></tbody></table>"}]}], "x_generator": {"engine": "ibm-cvegen"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-28T01:49:07.548739Z", "id": "CVE-2025-14684", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-28T01:49:31.469Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-14684", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-28T01:49:07.548739Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-28T01:49:23.106Z"}}], "cna": {"title": "IBM Maximo Application Suite - Monitor Component uses Log Forging which is vulnerable to .", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:maximo_application_suite___monitor_component:9.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite___monitor_component:9.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite___monitor_component:9.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite___monitor_component:9.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite___monitor_component:8.11:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite___monitor_component:8.11.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite___monitor_component:8.10:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite___monitor_component:8.10.0:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Maximo Application Suite - Monitor Component", "versions": [{"status": "affected", "version": "9.1"}, {"status": "affected", "version": "9.0"}, {"status": "affected", "version": "8.11"}, {"status": "affected", "version": "8.10"}]}], "solutions": [{"lang": "en", "value": "Remediated Product(s)Version(s)IBM Maximo Application Suite - Monitor Component9.1.6\n (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery IBM Maximo Application Suite - Monitor Component9.0.16\n (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery IBM Maximo Application Suite - Monitor Component8.11.24\n (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery IBM Maximo Application Suite - Monitor Component8.10.26\n (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery", "supportingMedia": [{"type": "text/html", "value": "<p><br></p><table><tbody><tr><td>Remediated Product(s)</td><td>Version(s)</td></tr><tr><td>IBM Maximo Application Suite - Monitor Component</td><td>9.1.6<br><a href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery?topic=upgrading\" rel=\"nofollow\">(available from the Catalog under Update Available)</a></td></tr><tr><td>IBM Maximo Application Suite - Monitor Component</td><td>9.0.16<br><a href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery?topic=upgrading\" rel=\"nofollow\">(available from the Catalog under Update Available)</a></td></tr><tr><td>IBM Maximo Application Suite - Monitor Component</td><td>8.11.24<br><a href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery?topic=upgrading\" rel=\"nofollow\">(available from the Catalog under Update Available)</a></td></tr><tr><td>IBM Maximo Application Suite - Monitor Component</td><td>8.10.26<br><a href=\"https://www.ibm.com/docs/en/mas-cd/continuous-delivery?topic=upgrading\" rel=\"nofollow\">(available from the Catalog under Update Available)</a></td></tr></tbody></table>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7267481", "tags": ["vendor-advisory", "patch"]}], "x_generator": {"engine": "ibm-cvegen"}, "descriptions": [{"lang": "en", "value": "IBM Maximo Application Suite - Monitor Component 9.1, 9.0, 8.11, and 8.10 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM Maximo Application Suite - Monitor Component 9.1, 9.0, 8.11, and 8.10 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-117", "description": "CWE-117 Improper Output Neutralization for Logs"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-03-25T21:22:44.935Z"}}}, "cveMetadata": {"cveId": "CVE-2025-14684", "state": "PUBLISHED", "dateUpdated": "2026-03-28T01:49:31.469Z", "dateReserved": "2025-12-13T20:24:32.826Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-03-25T21:22:44.935Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:maximo_application_suite___monitor_component:9.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite___monitor_component:9.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite___monitor_component:9.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite___monitor_component:9.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite___monitor_component:8.11:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite___monitor_component:8.11.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite___monitor_component:8.10:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite___monitor_component:8.10.0:*:*:*:*:*:*:*"], "product": "Maximo Application Suite - Monitor Component", "vendor": "IBM", "versions": [{"status": "affected", "version": "9.1"}, {"status": "affected", "version": "9.0"}, {"status": "affected", "version": "8.11"}, {"status": "affected", "version": "8.10"}]}], "source": "psirt@us.ibm.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:maximo_application_suite:*:*:*:*:*:*:*:*", "matchCriteriaId": "202DA614-9FA9-49BB-A847-97ACE508822E", "versionEndExcluding": "8.10.26", "versionStartIncluding": "8.10", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:maximo_application_suite:*:*:*:*:*:*:*:*", "matchCriteriaId": "2118EDE1-491F-4697-BD79-4261F62FE712", "versionEndExcluding": "8.11.24", "versionStartIncluding": "8.11", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:maximo_application_suite:*:*:*:*:*:*:*:*", "matchCriteriaId": "96448D2A-6208-4B95-B43C-08DF6746FC3F", "versionEndExcluding": "9.0.16", "versionStartIncluding": "9.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:maximo_application_suite:*:*:*:*:*:*:*:*", "matchCriteriaId": "1BCEFF22-070F-47FA-9C14-CCDA3B6AE38A", "versionEndExcluding": "9.1.6", "versionStartIncluding": "9.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM Maximo Application Suite - Monitor Component 9.1, 9.0, 8.11, and 8.10 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files."}, {"lang": "es", "value": "IBM Maximo Application Suite - Monitor Component 9.1, 9.0, 8.11 y 8.10 podr\u00eda permitir a un usuario no autorizado inyectar datos en los mensajes de registro debido a una neutralizaci\u00f3n inadecuada de elementos especiales al escribirse en los archivos de registro."}], "id": "CVE-2025-14684", "lastModified": "2026-06-17T08:36:23.160", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 1.4, "source": "psirt@us.ibm.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-14684", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-28T01:49:07.548739Z", "version": "2.0.3"}}]}, "published": "2026-03-25T22:16:18.660", "references": [{"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/7267481"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-117"}], "source": "psirt@us.ibm.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "8.11"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "8.10"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Maximo Application Suite - Monitor Component", "source": "cna", "vendor": "IBM"}, "product": "maximo_application_suite_-_monitor_component", "vendor": "ibm"}], "analysis": {"en": {"generated_at": "2026-04-01T07:24:34.055743+00:00", "value": {"mitigation_remediation": ["Update the IBM Maximo Monitor Component to the latest release available in the IBM Catalog (9.1.6 for 9.1, 9.0.16 for 9.0, 8.11.24 for 8.11, and 8.10.26 for 8.10).", "Verify that the patch has been applied by checking the component version in the administration console or via the API after deployment.", "If the update cannot be applied immediately, restrict or suspend user access that can write to the Monitor Component to minimize the opportunity for log forging.", "Continuously audit log files for anomalous or unexpected entries that could indicate forgery attempts and investigate any suspicious records."], "summary": {"action": "Apply Patch", "impact": "Log forging"}, "threat_synthesis": {"affected_systems": "Affected systems include the IBM Maximo Application Suite Monitor Component in releases 8.10, 8.11, 9.0 and 9.1. The vendor documentation identifies the vulnerable releases as 8.10.0 through 8.10.26, 8.11.0 through 8.11.24, 9.0.0 through 9.0.16, and 9.1.0 through 9.1.6, and provides patch versions 8.10.26, 8.11.24, 9.0.16 and 9.1.6 for remediation.", "description_and_impact": "The vulnerability in the IBM Maximo Application Suite Monitor Component allows an unauthorized user to insert arbitrary text into log entries because special characters are not properly neutralized. This flaw, classified as CWE\u2011117, results in forged log messages that appear legitimate, thereby undermining the integrity of audit trails, alerting mechanisms, and monitoring tools. The flaw does not provide code execution or elevate privileges, but it can conceal malicious activity or mislead investigations.", "risk_and_exploitability": "The CVSS base score of 4.0 indicates a medium severity, and the EPSS score of less than 1\u202f% suggests that exploitation is currently unlikely. The vulnerability is not listed in the CISA KEV catalog. An attacker would typically need a user account that can submit data to the Monitor Component; special privileges or remote code execution are not required. By injecting deceptive content into logs, an adversary can make legitimate entries appear fabricated, potentially hiding other attacks or misdirecting forensic analysis. Prompt application of the vendor\u2019s patch removes the vulnerable code path and restores trust in log data."}}}}, "created": "2026-03-26T11:31:26.381323+00:00", "updated": "2026-04-02T07:59:03.564357+00:00", "vendors": ["ibm", "ibm$PRODUCT$maximo_application_suite_-_monitor_component"]}