Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:common_licensing:9.0:*:*:*:*:*:*:*

part: a version: 9.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCommon Licensing (92279f57-184b-5fb4-a57d-5bf447fb86d9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-41774 vulnerable 2026-06-08 06:43:55.158647 IBM Common Licensing cross-site scripting
MEDIUM (4.8)
IBM Common Licensing 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 350348.
Published: 2024-08-13T11:03:30.402Z
Updated: 2024-08-24T10:51:40.563Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40697 vulnerable 2026-06-08 06:43:53.034196 IBM Common Licensing information disclosure
HIGH (7.5)
IBM Common Licensing 9.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 297895.
Published: 2024-08-13T10:59:51.302Z
Updated: 2024-08-13T13:11:00.325Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50946 vulnerable 2026-06-08 06:16:17.066913 IBM Common Licensing information disclosure
MEDIUM (6.5)
IBM Common Licensing 9.0 could allow an authenticated user to modify a configuration file that they should not have access to due to a broken authorization mechanism.
Published: 2025-01-26T15:44:22.056Z
Updated: 2025-01-27T14:52:16.993Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50945 vulnerable 2026-06-08 06:16:17.061662 IBM Common Licensing information disclosure
MEDIUM (6.2)
IBM Common Licensing 9.0 stores user credentials in plain clear text which can be read by a local user.
Published: 2025-01-26T15:43:09.312Z
Updated: 2025-01-27T14:52:26.925Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50306 vulnerable 2026-06-08 06:16:15.912137 IBM Common Licensing information disclosure
MEDIUM (4)
IBM Common Licensing 9.0 could allow a local user to enumerate usernames due to an observable response discrepancy. IBM X-Force ID: 273337.
Published: 2024-02-20T13:51:27.061Z
Updated: 2024-08-02T22:16:46.620Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.