Skip to content
Sign in
6.4 Medium

CVE-2025-36352 IBM License Metric Tool 9.2.0 through 9.2.40 is vulnerable to stored cross-site scripting

Description

IBM License Metric Tool 9.2.0 through 9.2.40 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products and versions

Product Affected versions Fixed in
License Metric Tool 9.2 9.2.0 → 9.2.40 No fix stated

Other CVEs of License Metric Tool

The 3 CVEs of License Metric Tool →
CVE-2025-36351 IBM License Metric Tool 9.2.0 through 9.2.40 could allow an authenticated user to bypass access controls in the REST… 4.3 Medium CVE-2023-43044 IBM License Metric Tool 9.2 could allow a remote attacker to traverse directories on the system 5.3 Medium
Track this CVE