CVE-2014-6194: Directory traversal vulnerability in an unspecified web form in IBM Maximo Asset Management 7.1 through 7.1...

Security readout for executives and security teams

This flaw lets a logged-in remote user abuse an unspecified IBM Maximo web form to read files outside the intended directory. For executives, the business risk is unauthorized disclosure of server-side configuration, operational, or sensitive files in affected Maximo deployments. Exposure is most likely in organizations running IBM Maximo Asset Management 7.1 through 7.1.1.13, affected 7.5.x builds before named fixes, SmartCloud Control Desk Maximo variants, or Tivoli IT Asset Management for IT versions listed in the CVE. Treat this as a high-priority legacy enterprise application exposure if affected Maximo systems remain in production. The key decision is whether sensitive operational or configuration files could be read by authenticated users beyond their business need. Mitigation focus: Identify all IBM Maximo and related Maximo-based product versions in use.; Apply IBM fixes or upgrades referenced by the vendor advisory.; For Maximo 7.5.0, move to 7.5.0.6 IFIX007 or later where applicable..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.