Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:common_licensing:agent:*:*:*:*:*:*:*

part: a version: agent update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCommon Licensing (92279f57-184b-5fb4-a57d-5bf447fb86d9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-19646 vulnerable 2026-09-16 04:34:15.661990 Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent
CRITICAL (9.1)
IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 could allow a remote attacker to redirect users to an arbitrary domain due to improper validation of the HTTP Host header.
Published: 2026-09-10T22:02:47.364Z
Updated: 2026-09-11T17:04:13.786Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-19543 vulnerable 2026-09-16 04:34:15.390567 Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent
MEDIUM (6.2)
IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 performs input validation exclusively on the client side and fails to enforce the same restrictions on the server side. An attacker can modify requests to bypass validation controls and submit unauthorized values, potentially resulting in unintended application behavior.
Published: 2026-09-14T18:26:13.674Z
Updated: 2026-09-14T19:22:58.899Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.