by Kastro
Paper/Archive/CVE-2025-15399

CVE-2025-15399

IBM Common Licensing — Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent

EPSS 0.3%CVSS 10.0
critical.is priorityof 100
33
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 16.9.169 × 203.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Affected

ProductAffectedFixed inSource
Common LicensingAgent 9.0–CNA
Common LicensingAgent 9.0.0.1–CNA
Common LicensingAgent 9.0.0.2–CNA
Common LicensingART 9.0–CNA
Common LicensingART 9.0.0.1–CNA
Common LicensingART 9.0.0.2–CNA

Scores by source

ibm (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

patchibm.com/support/pages/node/7286490