Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:common_licensing:agent:*:*:*:*:*:*:*

part: a version: agent update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCommon Licensing (92279f57-184b-5fb4-a57d-5bf447fb86d9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1025 vulnerable 2026-10-13 12:29:27.903072 Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent
MEDIUM (6.1)
IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-09-18T15:49:55.814Z
Updated: 2026-09-19T14:21:50.334Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1029 vulnerable 2026-10-13 12:29:27.861897 Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent
MEDIUM (5.4)
IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-09-18T15:51:00.339Z
Updated: 2026-09-18T17:32:50.910Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1031 vulnerable 2026-10-13 12:29:27.794295 Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent
MEDIUM (6.1)
IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-09-18T15:51:41.922Z
Updated: 2026-09-19T14:11:44.429Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1030 vulnerable 2026-10-13 12:29:27.593599 Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent
MEDIUM (4.3)
IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 generates an error message that includes sensitive information about its environment, users, or associated data.
Published: 2026-09-18T15:51:21.187Z
Updated: 2026-09-19T14:21:50.155Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1037 vulnerable 2026-10-13 12:29:26.416264 Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent
MEDIUM (6.1)
IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-09-18T15:52:28.623Z
Updated: 2026-09-18T16:17:38.648Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15399 vulnerable 2026-10-13 12:22:57.452651 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-19646 vulnerable 2026-09-16 04:34:15.661990 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-19543 vulnerable 2026-09-16 04:34:15.390567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.