Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:license_metric_tool:9.2.40:*:*:*:*:*:*:*

part: a version: 9.2.40 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductLicense Metric Tool (90f02c4c-ac63-53ec-bd2c-41b4aec6bfc6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36352 vulnerable 2026-06-08 07:21:01.576428 IBM License Metric Tool cross-site scripting
MEDIUM (6.4)
IBM License Metric Tool 9.2.0 through 9.2.40 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-09-29T14:25:39.773Z
Updated: 2025-09-29T15:08:36.763Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36351 vulnerable 2026-06-08 07:21:01.574549 IBM License Metric Tool bypass security
MEDIUM (4.3)
IBM License Metric Tool 9.2.0 through 9.2.40 could allow an authenticated user to bypass access controls in the REST API interface and perform unauthorized actions.
Published: 2025-09-29T14:27:39.032Z
Updated: 2025-09-29T15:04:12.822Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.