CVE-2014-3026: CRLF injection vulnerability in IBM Maximo Asset Management 7.5 through 7.5.0.6, and 7.5 through 7.5.0.3 an...

Security readout for executives and security teams

CVE-2014-3026 is a header injection issue in IBM Maximo Asset Management and SmartCloud Control Desk versions named in the CVE description. An authenticated remote user could manipulate HTTP responses, which may affect trust in web sessions or downstream caches. The bundle does not provide CVSS, exploit evidence, or exact vendor remediation details. Exposure is likely limited to organizations running the named IBM asset or service desk products and versions with authenticated web access enabled. Internet-facing portals or broadly accessible internal deployments carry higher operational concern. The source bundle does not identify affected CPEs or deployment prerequisites beyond authentication. Prioritize remediation for exposed or business-critical IBM Maximo and SmartCloud Control Desk environments. The issue requires authentication and has no cited active exploitation here, but response manipulation in enterprise service platforms can still create business risk. Mitigation focus: Identify deployments of the named IBM products and versions.; Review the IBM support document and X-Force entry for vendor remediation.; Apply IBM-provided fixes or upgrades where available..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.