← CVE Intelligence

CVE-2026-1037

Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent PUBLISHED

Description (CNA)

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected (CNA)

Vendor / productVersions
IBM / Common Licensingaffected Agent 9.0; affected Agent 9.0.0.1; affected Agent 9.0.0.2; affected ART 9.0; affected ART 9.0.0.1; affected ART 9.0.0.2

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.