Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:applinx:11.1:*:*:*:*:*:*:*

part: a version: 11.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductApplinx (a5a6c794-6ee9-557c-8307-a2b5a665c391)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36419 vulnerable 2026-06-08 07:21:01.713977 Multiple vulnerabilities found in IBM ApplinX.
MEDIUM (5.3)
IBM ApplinX 11.1 could disclose sensitive information about server architecture that could aid in further attacks against the system.
Published: 2026-01-20T15:53:37.574Z
Updated: 2026-01-20T16:07:57.795Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36418 vulnerable 2026-06-08 07:21:01.713619 Multiple vulnerabilities found in IBM ApplinX.
HIGH (7.3)
IBM ApplinX 11.1 is vulnerable due to a privilege escalation vulnerability due to improper verification of JWT tokens. An attacker may be able to craft or modify a JSON web token in order to impersonate another user or to elevate their privileges.
Published: 2026-01-20T15:50:40.562Z
Updated: 2026-01-20T16:09:43.989Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36410 vulnerable 2026-06-08 07:21:01.710480 Multiple vulnerabilities found in IBM ApplinX.
LOW (3.1)
IBM ApplinX 11.1 could allow an authenticated user to perform unauthorized administrative actions on the server due to server-side enforcement of client-side security.
Published: 2026-01-20T15:39:53.965Z
Updated: 2026-01-20T16:41:07.252Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36409 vulnerable 2026-06-08 07:21:01.710070 Multiple vulnerabilities found in IBM ApplinX.
MEDIUM (5.4)
IBM ApplinX 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-01-20T15:37:56.120Z
Updated: 2026-01-20T16:38:27.452Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36408 vulnerable 2026-06-08 07:21:01.708259 Multiple vulnerabilities found in IBM ApplinX.
MEDIUM (6.4)
IBM ApplinX 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-01-20T15:33:59.216Z
Updated: 2026-01-20T16:35:00.739Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.