Skip to content
OpenAdvisories
Critical · 10.0 CVE-2025-15399 EUVD-2025-210953GHSA-2vwg-4434-qc95

Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent

Published Sep 18, 2026 · Updated Sep 21, 2026 · Assigned by ibm

Description

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Affected products

VendorProductAffectedFixed
IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, ART 9.0.0.2 —

References