IBM License Metric Tool 9.2.0
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:license_metric_tool:9.2.0:*:*:*:*:*:*:*
part: a version: 9.2.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | License Metric Tool (90f02c4c-ac63-53ec-bd2c-41b4aec6bfc6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36352 |
vulnerable | 2026-06-08 07:21:01.576382 |
IBM License Metric Tool cross-site scripting
MEDIUM (6.4)
IBM License Metric Tool 9.2.0 through 9.2.40 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-09-29T14:25:39.773Z
Updated: 2025-09-29T15:08:36.763Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36351 |
vulnerable | 2026-06-08 07:21:01.573538 |
IBM License Metric Tool bypass security
MEDIUM (4.3)
IBM License Metric Tool 9.2.0 through 9.2.40
could allow an authenticated user to bypass access controls in the REST API interface and perform unauthorized actions.
Published: 2025-09-29T14:27:39.032Z
Updated: 2025-09-29T15:04:12.822Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12985 |
vulnerable | 2026-06-08 07:04:31.413842 |
License Service: Privilege escalation vulnerability
HIGH (8.4)
IBM Licensing Operator incorrectly assigns privileges to security critical files which could allow a local root escalation inside a container running the IBM Licensing Operator image.
Published: 2026-01-20T14:50:51.912Z
Updated: 2026-01-20T15:10:40.350Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8981 |
vulnerable | 2026-06-08 05:08:22.355411 |
Details available
IBM BigFix Inventory v9 allows web pages to be stored locally which can be read by another user on the system.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-06T02:35:02.349Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8980 |
vulnerable | 2026-06-08 05:08:22.354964 |
Details available
IBM BigFix Inventory v9 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-06T02:35:02.296Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8977 |
vulnerable | 2026-06-08 05:08:22.354458 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8967 |
vulnerable | 2026-06-08 05:08:22.309308 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8966 |
vulnerable | 2026-06-08 05:08:22.307168 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8963 |
vulnerable | 2026-06-08 05:08:22.303967 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8961 |
vulnerable | 2026-06-08 05:08:22.298770 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4929 |
vulnerable | 2026-06-08 05:06:48.020081 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.