CVE-2025-2987: SSRF in IBM Maximo Asset Management

The SSRF vulnerability in IBM Maximo Asset Management allows an authenticated user to manipulate the application into making requests to arbitrary internal or external resources. This can be exploited to perform network reconnaissance, identifying internal services and their configurations. An attacker could potentially access sensitive data residing behind firewalls or internal networks that are normally inaccessible. While the CVSS score is LOW, the potential for lateral movement and data exposure makes this a significant concern, especially in environments with complex internal network architectures. Successful exploitation could lead to unauthorized access to databases, configuration files, or other critical assets.

1. Reserved2025-03-30
2. Published2025-04-21
3. Modified2025-09-01
4. EPSS updated2026-03-23

The primary mitigation for CVE-2025-2987 is to upgrade IBM Maximo Asset Management to version 7.6.2 or later, which contains the fix. If an immediate upgrade is not feasible, consider implementing strict network segmentation to limit the potential impact of a successful SSRF attack. Implement robust input validation and sanitization to prevent attackers from crafting malicious URLs. Web Application Firewalls (WAFs) configured with rules to block suspicious outbound requests can also provide a layer of defense. Monitor network traffic for unusual outbound connections originating from the Maximo Asset Management server.