CVE-2014-3084: IBM Maximo Asset Management 6.1 through 6.5, 7.1 through 7.1.1.13, and 7.5 through 7.5.0.6; Maximo Asset Ma...

Security readout for executives and security teams

CVE-2014-3084 is an authorization weakness in IBM Maximo-related products. A remote authenticated user may bypass intended write restrictions on calendar entries. Business impact depends on how calendars drive maintenance, asset, or service operations, but the source bundle does not show unauthenticated access, public exploitation, or CVSS scoring. Exposure is most likely in organizations still running the listed IBM Maximo 6.x, 7.1, 7.5, SmartCloud Control Desk, or Tivoli IT Asset Management versions. Internet exposure increases concern, but the source only confirms remote authenticated access, not unauthenticated exploitation. Treat as a targeted operational integrity issue, not an emergency internet worm scenario. Prioritize remediation where Maximo calendars influence maintenance or service workflows, especially in exposed or broadly accessible environments. Mitigation focus: Review IBM APAR IV61274 and linked IBM guidance for fixed versions or interim fixes.; Prioritize upgrade planning for affected Maximo, SmartCloud Control Desk, and Tivoli ITAM deployments.; Restrict Maximo access to trusted networks and authenticated business users only..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.