Common Licensing

common_licensing

Vendor: Ibm • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-50946 1Ibm 1Common Licensing Jun 17, 2026 Jan 26, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Common Licensing 9.0 could allow an authenticated user to modify a configuration file that they should not have access to due to a broken authorization mechanism.
CVE-2023-50945 1Ibm 1Common Licensing Jun 17, 2026 Jan 26, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM Common Licensing 9.0 stores user credentials in plain clear text which can be read by a local user.
CVE-2024-41774 1Ibm 1Common Licensing Jun 17, 2026 Aug 13, 2024 N/A· v4 4.8 MEDIUM· v3 N/A· v2 IBM Common Licensing 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially lea...Show more IBM Common Licensing 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 350348.Show less
CVE-2024-40697 1Ibm 1Common Licensing Jun 17, 2026 Aug 13, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Common Licensing 9.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 297895.
CVE-2023-50306 1Ibm 1Common Licensing Jun 17, 2026 Feb 20, 2024 N/A· v4 3.3 LOW· v3 N/A· v2 IBM Common Licensing 9.0 could allow a local user to enumerate usernames due to an observable response discrepancy. IBM X-Force ID: 273337.