Ibm License Metric Tool vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Ibm License Metric Tool: 2 record(s), with affected versions and fixes.cpe:2.3:a:ibm:license_metric_tool
CVE-2025-36352
Medium · 5.4
CWE-79 Sep 29, 2025
IBM License Metric Tool cross-site scripting
IBM License Metric Tool 9.2.0 through 9.2.40 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVE-2025-36351
Medium · 4.3
CWE-284 Sep 29, 2025
IBM License Metric Tool bypass security
IBM License Metric Tool 9.2.0 through 9.2.40
could allow an authenticated user to bypass access controls in the REST API interface and perform unauthorized actions.