CVE-2025-36351

—

CVSS 3.1

4.3 medium

EPSS

<1%p15

Published

Sep 29, 2025 (Sep 29, 2025)

Modified

Jun 17, 2026

Description

IBM License Metric Tool 9.2.0 through 9.2.40 could allow an authenticated user to bypass access controls in the REST API interface and perform unauthorized actions.

Vendors: ibm
Products: license metric tool
Weakness: CWE-284
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.