Skip to content
Sign in
4.3 Medium

CVE-2025-36351 IBM License Metric Tool 9.2.0 through 9.2.40 could allow an authenticated user to bypass access controls in the REST…

Description

IBM License Metric Tool 9.2.0 through 9.2.40 could allow an authenticated user to bypass access controls in the REST API interface and perform unauthorized actions.

Affected products and versions

Product Affected versions Fixed in
License Metric Tool 9.2 9.2.0 → 9.2.40 No fix stated

Other CVEs of License Metric Tool

The 3 CVEs of License Metric Tool →
CVE-2025-36352 IBM License Metric Tool 9.2.0 through 9.2.40 is vulnerable to stored cross-site scripting 6.4 Medium CVE-2023-43044 IBM License Metric Tool 9.2 could allow a remote attacker to traverse directories on the system 5.3 Medium
Track this CVE