CVE-2025-2986 – IBM Maximo Asset Management Stored Cross-Site Scripting Vulnerability

April 25, 2025

CVE ID : CVE-2025-2986

Published : April 25, 2025, 12:15 p.m. | 2 hours, 46 minutes ago

Description : IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Severity: 5.5 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-3912 – WordPress WS Form LITE Unauthorized Data Access Vulnerability

Next Article CVE-2025-2470 – Nextend Social Login WordPress Plugin Privilege Escalation Vulnerability

Highlights

CVE-2025-3530 – WordPress Simple Shopping Cart Price Tampering Vulnerability

April 23, 2025

CVE ID : CVE-2025-3530

Published : April 23, 2025, 8:15 a.m. | 1 hour, 45 minutes ago

Description : The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to product price manipulation in all versions up to, and including, 5.1.2. This is due to a logic flaw involving the inconsistent use of parameters during the cart addition process. The plugin uses the parameter ‘product_tmp_two’ for computing a security hash against price tampering while using ‘wspsc_product’ to display the product, allowing an unauthenticated attacker to substitute details from a cheaper product and bypass payment for a more expensive item.

Severity: 7.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

The Ultimate Guide to Node.js Development Pricing for Enterprises

Stack Overflow: Developers’ trust in AI outputs is worsening year over year

Web Components: Working With Shadow DOM

Google’s new Opal tool allows users to create mini AI apps with no coding required

I replaced my Samsung OLED TV with this Sony Mini LED model for a week – and didn’t regret it

I tested the most popular robot mower on the market – and it was a $5,000 crash out

5 gadgets and accessories that leveled up my gaming setup (including a surprise console)

Why I’m patiently waiting for the Samsung Z Fold 8 next year (even though the foldable is already great)

Performance Analysis with Laravel’s Measurement Tools

Performance Analysis with Laravel’s Measurement Tools

Memoization and Function Caching with this PHP Package

Laracon US 2025 Livestream

Microsoft mysteriously offered a Windows 11 upgrade to this unsupported Windows 10 PC — despite it failing to meet the “non-negotiable” TPM 2.0 requirement

Microsoft mysteriously offered a Windows 11 upgrade to this unsupported Windows 10 PC — despite it failing to meet the “non-negotiable” TPM 2.0 requirement

With Windows 10’s fast-approaching demise, this Linux migration tool could let you ditch Microsoft’s ecosystem with your data and apps intact — but it’s limited to one distro

Windows 10 is 10 years old today — let’s look back at 10 controversial and defining moments in its history

CVE-2025-2986 – IBM Maximo Asset Management Stored Cross-Site Scripting Vulnerability

CISA Adds PaperCut NG/MF CSRF Vulnerability to KEV Catalog Amid Active Exploitation

Tea App Data Breach: 72,000 Selfies and IDs of Women Leaked Online

ISC Warns of Cache Poisoning and Crash Risks in BIND: What You Need to Know About CVE-2025-40776 and CVE-2025-40777

CVE-2025-45885 – PHPGURUKUL Vehicle Parking Management System SQL Injection

One of the most powerful work laptops I’ve tested this year is not a ThinkPad or MacBook

CVE-2025-32709 – “Windows Ancillary Function Driver for WinSock Use-After-Free Privilege Escalation Vulnerability”

CVE-2025-3530 – WordPress Simple Shopping Cart Price Tampering Vulnerability

My SSD enclosure was already inexpensive, but this sale makes it SUPER cheap — Read or clone any compatible SSD for less

CVE-2025-33005 – IBM Planning Analytics Session Impersonation Vulnerability

What to work on next?

CVE-2025-2986 – IBM Maximo Asset Management Stored Cross-Site Scripting Vulnerability

Related Posts