Vulnerability · Published May 6, 2025 · Assigned by ibm
CVE-2025-2898IBM Maximo Application Suite privilege escalation
High 7.5
In plain English
A high-severity security flaw in Maximo Application Suite from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.3%top 71.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
IBM Maximo Application Suite 9.0 could allow an attacker with some level of access to elevate their privileges due to a security configuration vulnerability in Role-Based Access Control (RBAC) configurations.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | Maximo Application Suite | 9.0 |
Weakness: CWE-266 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://https://www.ibm.com/support/pages/node/7232050 vendor-advisory, patch