CVE-2025-2986

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Apr 25, 2025

Updated: Apr 29, 2025

CWE ID 79

Summary

CVE-2025-2986 is a stored cross-site scripting (XSS) vulnerability affecting IBM Maximo Asset Management version 7.6.1.3. A privileged user can exploit this issue by embedding malicious JavaScript code into the Web UI. This code is then executed in a user's browser when they view a manipulated page, potentially leading to the disclosure of session credentials within a trusted environment.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

IBM Maximo Asset Management

Affected Vendors

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/4z0p5N
https://www.cve.org/CVERecord?id=CVE-2025-2986
https://nvd.nist.gov/vuln/detail/CVE-2025-2986

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

DRAT V2: Updated DRAT Emerges in TAG-140’s Arsenal

Threats to the 2025 NATO Summit

Artificial Eyes: Generative AI in China’s Military Intelligence

Know What Matters

For Customers

For Partners