Skip to content
OpenAdvisories
Medium WID-SEC-2025-2149 2 CVEs

IBM License Metric Tool: Mehrere Schwachstellen

Published Sep 28, 2025 · Updated Sep 29, 2025 · Revision 2 · de-DE

Vendor: IBM Product: License Metric Tool Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM License Metric Tool ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Daten zu manipulieren oder Cross-Site-Scripting durchzuführen.

Product

Das IBM License Metric Tool dient der Lizenzverwaltung für IBM Produkte.

Vulnerabilities 2

  • Medium 6.4
    CVE-2025-36352

    IBM License Metric Tool cross-site scripting

    IBM License Metric Tool 9.2.0 through 9.2.40 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credent…

    IBM License Metric Tool
  • Medium 4.3
    CVE-2025-36351

    IBM License Metric Tool bypass security

    IBM License Metric Tool 9.2.0 through 9.2.40 could allow an authenticated user to bypass access controls in the REST API interface and perform unauthorized actions.

    IBM License Metric Tool

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2025-31577, EUVD-2025-31574

  2. #1

    Initiale Fassung

References