License Metric Tool
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:license_metric_tool:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | License Metric Tool (90f02c4c-ac63-53ec-bd2c-41b4aec6bfc6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36352 |
vulnerable | 2026-06-08 07:21:01.576457 |
IBM License Metric Tool cross-site scripting
MEDIUM (6.4)
IBM License Metric Tool 9.2.0 through 9.2.40 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-09-29T14:25:39.773Z
Updated: 2025-09-29T15:08:36.763Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36351 |
vulnerable | 2026-06-08 07:21:01.575926 |
IBM License Metric Tool bypass security
MEDIUM (4.3)
IBM License Metric Tool 9.2.0 through 9.2.40
could allow an authenticated user to bypass access controls in the REST API interface and perform unauthorized actions.
Published: 2025-09-29T14:27:39.032Z
Updated: 2025-09-29T15:04:12.822Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43044 |
vulnerable | 2026-06-08 06:11:09.817772 |
IBM License Metric Tool directory traversal
MEDIUM (5.3)
IBM License Metric Tool 9.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 266893.
Published: 2023-09-28T17:23:59.611Z
Updated: 2024-09-23T18:51:24.140Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8964 |
vulnerable | 2026-06-08 05:08:22.306703 |
Details available
IBM BigFix Inventory v9 9.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 118853.
Published: 2017-07-13T15:00:00.000Z
Updated: 2024-09-16T16:17:51.455Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.