Vulnerabilidades do Ibm License Metric Tool

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Ibm License Metric Tool: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:ibm:license_metric_tool

CVE-2025-36352 Média · 5.4 CWE-79 29/09/2025

IBM License Metric Tool cross-site scripting

IBM License Metric Tool 9.2.0 through 9.2.40 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

CVE-2025-36351 Média · 4.3 CWE-284 29/09/2025

IBM License Metric Tool bypass security

IBM License Metric Tool 9.2.0 through 9.2.40 could allow an authenticated user to bypass access controls in the REST API interface and perform unauthorized actions.