CVE-2025-36352

Description

References

• ibm.com/support/pages/node/7246534 · Vendor Advisory

More vulnerabilities in license metric tool

• CVE-2025-36351MEDIUM 4.3IBM License Metric Tool 9.2.0 through 9.2.40 could allow an authenticated user to bypass access controls in the REST API interface and per…
• CVE-2023-43044HIGH 7.5IBM License Metric Tool 9.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted …
• CVE-2016-8964CRITICAL 9.8IBM BigFix Inventory v9 9.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials…
• CVE-2016-8977MEDIUM 5.3IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This information could be used…
• CVE-2016-8963MEDIUM 5.5IBM BigFix Inventory v9 stores potentially sensitive information in log files that could be read by a local user.