Vulnerabilities > IBM > Common Licensing > Medium

DATE CVE VULNERABILITY TITLE RISK
2025-01-26 CVE-2023-50945 Unprotected Storage of Credentials vulnerability in IBM Common Licensing 9.0.0
IBM Common Licensing 9.0 stores user credentials in plain clear text which can be read by a local user.
local
low complexity
ibm CWE-256
5.5
2025-01-26 CVE-2023-50946 Incorrect Authorization vulnerability in IBM Common Licensing 9.0.0
IBM Common Licensing 9.0 could allow an authenticated user to modify a configuration file that they should not have access to due to a broken authorization mechanism.
network
low complexity
ibm CWE-863
6.5
2024-08-13 CVE-2024-41774 Cross-site Scripting vulnerability in IBM Common Licensing 9.0
IBM Common Licensing 9.0 is vulnerable to stored cross-site scripting.
network
low complexity
ibm CWE-79
4.8