Common Licensing (Ibm) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2026-09-18. Vendor: Ibm.
CVEs of Common Licensing
- CVE-2026-1037 - CVSS 6.1 (medium), 2026-09-18: IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability…
- CVE-2026-1031 - CVSS 6.1 (medium), 2026-09-18: IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability…
- CVE-2026-1030 - CVSS 4.3 (medium), 2026-09-18: IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 generates an error message that includes sensitive…
- CVE-2026-1029 - CVSS 5.4 (medium), 2026-09-18: IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability…
- CVE-2026-1025 - CVSS 6.1 (medium), 2026-09-18: IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability…
- CVE-2025-15399 - CVSS 10 (critical), 2026-09-18: IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site request forgery which could…
- CVE-2026-19543 - CVSS 6.2 (medium), 2026-09-14: IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 performs input validation exclusively on the client side…
- CVE-2026-19646 - CVSS 9.1 (critical), 2026-09-10: IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 could allow a remote attacker to redirect users to an…
- CVE-2023-50946 - CVSS 6.5 (medium), 2025-01-26: IBM Common Licensing 9.0 could allow an authenticated user to modify a configuration file that they should not have access to due to a broken authorization…
- CVE-2023-50945 - CVSS 6.2 (medium), 2025-01-26: IBM Common Licensing 9.0 stores user credentials in plain clear text which can be read by a local user.
- CVE-2024-40697 - CVSS 7.5 (high), 2024-08-13: IBM Common Licensing 9.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.…
- CVE-2024-41774 - CVSS 4.8 (medium), 2024-08-13: IBM Common Licensing 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the…
- CVE-2023-50306 - CVSS 4 (medium), 2024-02-20: IBM Common Licensing 9.0 could allow a local user to enumerate usernames due to an observable response discrepancy. IBM X-Force ID: 273337.