Aller au contenu
Se connecter
6.4 Moyenne

CVE-2025-36352 IBM License Metric Tool 9.2.0 through 9.2.40 is vulnerable to stored cross-site scripting

Description

IBM License Metric Tool 9.2.0 through 9.2.40 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Produits et versions touchés

Produit Versions touchées Corrigé en
License Metric Tool 9.2 9.2.0 → 9.2.40 Pas de correctif indiqué

Autres CVE de License Metric Tool

Les 3 CVE de License Metric Tool →
CVE-2025-36351 IBM License Metric Tool 9.2.0 through 9.2.40 could allow an authenticated user to bypass access controls in the REST… 4.3 Moyenne CVE-2023-43044 IBM License Metric Tool 9.2 could allow a remote attacker to traverse directories on the system 5.3 Moyenne
Suivre cette CVE