Medium severity6.1NVD Advisory· Published Sep 18, 2026· Updated Sep 18, 2026
CVE-2026-1025
CVE-2026-1025
Description
IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 9.0, 9.0.0.1, 9.0.0.2, ART 9.0, ART 9.0.0.1, ART 9.0.0.2
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.