Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:applinx:11.1.0:*:*:*:*:*:*:*

part: a version: 11.1.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductApplinx (a5a6c794-6ee9-557c-8307-a2b5a665c391)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36419 vulnerable 2026-06-08 07:21:01.714015 Multiple vulnerabilities found in IBM ApplinX.
MEDIUM (5.3)
IBM ApplinX 11.1 could disclose sensitive information about server architecture that could aid in further attacks against the system.
Published: 2026-01-20T15:53:37.574Z
Updated: 2026-01-20T16:07:57.795Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36418 vulnerable 2026-06-08 07:21:01.713734 Multiple vulnerabilities found in IBM ApplinX.
HIGH (7.3)
IBM ApplinX 11.1 is vulnerable due to a privilege escalation vulnerability due to improper verification of JWT tokens. An attacker may be able to craft or modify a JSON web token in order to impersonate another user or to elevate their privileges.
Published: 2026-01-20T15:50:40.562Z
Updated: 2026-01-20T16:09:43.989Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36411 vulnerable 2026-06-08 07:21:01.713203 Multiple vulnerabilities found in IBM ApplinX.
LOW (3.5)
IBM ApplinX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
Published: 2026-01-20T15:43:07.492Z
Updated: 2026-01-20T16:04:55.158Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36410 vulnerable 2026-06-08 07:21:01.710623 Multiple vulnerabilities found in IBM ApplinX.
LOW (3.1)
IBM ApplinX 11.1 could allow an authenticated user to perform unauthorized administrative actions on the server due to server-side enforcement of client-side security.
Published: 2026-01-20T15:39:53.965Z
Updated: 2026-01-20T16:41:07.252Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36409 vulnerable 2026-06-08 07:21:01.710213 Multiple vulnerabilities found in IBM ApplinX.
MEDIUM (5.4)
IBM ApplinX 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-01-20T15:37:56.120Z
Updated: 2026-01-20T16:38:27.452Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36408 vulnerable 2026-06-08 07:21:01.709619 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49800 vulnerable 2026-06-08 06:50:14.695856 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49798 vulnerable 2026-06-08 06:50:14.695580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49797 vulnerable 2026-06-08 06:50:14.695181 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49796 vulnerable 2026-06-08 06:50:14.694859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49795 vulnerable 2026-06-08 06:50:14.694584 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49794 vulnerable 2026-06-08 06:50:14.694164 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49793 vulnerable 2026-06-08 06:50:14.693880 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49792 vulnerable 2026-06-08 06:50:14.693597 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49791 vulnerable 2026-06-08 06:50:14.693212 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.