Known vulnerabilities in IBM Common Licensing

Vendor: IBM Corporation
Software: IBM Common Licensing
Software CPE: cpe:2.3:a:ibm_corporation:ibm_common_licensing:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 133
Public exploits: 11
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Common Licensing IBM Common Licensing is affected by 133 known vulnerabilities: 2 critical, 14 high, 78 medium, 39 low Critical High Medium Low

Vulnerabilities (133)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145310 - Uncontrolled Recursion
CVE-2026-45205		 CWE-674 Low
No
No
 9.1 25.08.2026 SB20260825101
SB20260825115
SB2026090313
and 1 more
#VU145266 - Resource exhaustion
CVE-2026-54399		 CWE-400 Medium
No
No
 9.1 25.08.2026 SB2026082579
SB2026090315
#VU144596 - Server-Side Request Forgery (SSRF)
CVE-2026-77310		 CWE-918 Medium
No
No
 9.1 24.08.2026 SB2026072278
SB2026090312
SB2026091103
and 2 more
#VU139159 - Deserialization of Untrusted Data
CVE-2026-54512		 CWE-502 High
No
No
 9.1 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 36 more
#VU139158 - Incomplete List of Disallowed Inputs
CVE-2026-54513		 CWE-184 High
No
No
 9.1 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 38 more
#VU139157 - Server-Side Request Forgery (SSRF)
CVE-2026-54514		 CWE-918 Medium
No
No
 9.1 22.07.2026 SB2026072278
SB2026072288
SB2026072340
and 16 more
#VU139156 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-54515		 CWE-915 Medium
No
No
 9.1 22.07.2026 SB2026072278
SB2026072282
SB2026072288
and 18 more
#VU139155 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-54516		 CWE-915 Medium
No
No
 9.1 22.07.2026 SB2026072278
SB2026072282
SB2026072340
and 9 more
#VU139154 - Incorrect Authorization
CVE-2026-54517		 CWE-863 Medium
No
No
 9.1 22.07.2026 SB2026072278
SB2026072282
SB2026072340
and 9 more
#VU139153 - Incorrect Authorization
CVE-2026-54518		 CWE-863 Medium
No
No
 9.1 22.07.2026 SB2026072278
SB2026072282
SB2026072340
and 9 more
#VU139152 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-59888		 CWE-915 Medium
No
No
 9.1 22.07.2026 SB2026072278
SB2026072413
SB20260728138
and 10 more
#VU139151 - Incorrect Authorization
CVE-2026-59889		 CWE-863 Low
No
No
 9.1 22.07.2026 SB2026072278
SB2026072413
SB20260728138
and 10 more
#VU126758 - Improper input validation
CVE-2026-22016		 CWE-20 Medium
No
No
 - 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 80 more
#VU126761 - Improper input validation
CVE-2026-22021		 CWE-20 Medium
No
No
 - 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 82 more
#VU126762 - Improper input validation
CVE-2026-22013		 CWE-20 Medium
No
No
 - 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 79 more
#VU124875 - Use of Hard-coded Cryptographic Key
CVE-2025-14923		 CWE-321 Low
No
No
 - 06.04.2026 SB2026040626
SB2026040627
SB2026041006
and 18 more
#VU124831 - Weak Password Requirements
CVE-2025-14917		 CWE-521 Low
No
No
 - 02.04.2026 SB2026040252
SB2026040327
SB2026040328
and 19 more
#VU124829 - Exposure of sensitive information to an unauthorized actor
CVE-2025-14915		 CWE-200 Low
No
No
 - 02.04.2026 SB2026040252
SB2026040326
SB2026040329
and 15 more
#VU117335 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-1647		 CWE-79 Medium
No
No
 9.1 17.10.2025 SB2025101709
SB2025112023
SB2026062237
and 1 more
#VU97688 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-6485		 CWE-79 Medium
No
No
 9.1 25.09.2024 SB2024092512
SB20241230139
SB2025060920
and 4 more


Showing elements 1 - 20 out of 133