CVE-2024-49791

IBM ApplinX 11.1 is affected by a cross-site scripting vulnerability that allows an authenticated user to inject arbitrary JavaScript into the Web UI, potentially leading to credentials disclosure within a trusted session. Affected component: IBM ApplinX Web UI (11.1); root cause: improper handli...

CVE-2024-49793

Summary: CVE-2024-49793 affects IBM ApplinX 11.1 and is described as a cross-site scripting (XSS) vulnerability in the Web UI that could allow an authenticated user to inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The root cause is improper h...

CVE-2024-49794

Summary: CVE-2024-49794 affects IBM ApplinX 11.1 and is a cross-site request forgery vulnerability. Impact: could allow an attacker to perform malicious, unauthorized actions transmitted from a trusted user’s context. Root cause: injected CSRF in web actions; specific technical details are not pr...

CVE-2024-49796

IBM ApplinX 11.1 is reported vulnerable to a remote click hijack (clickjacking) when a user visits a malicious site, enabling the attacker to hijack the victim’s click actions and potentially facilitate further attacks. The vulnerability is tied to IBM ApplinX 11.1; IBM’s remediation is to upgrad...

CVE-2024-49795

Summary: CVE-2024-49795 affects IBM ApplinX 11.1 and describes a cross-site request forgery (CSRF) vulnerability that could allow an attacker to perform malicious, unauthorized actions on behalf of a trusted user. The issue stems from CSRF in the Web UI, enabling actions transmitted from a user t...

CVE-2024-49798

IBM ApplinX 11.1 is affected by CVE-2024-49798: a vulnerability where a detailed technical error message returned in the browser could disclose sensitive information, potentially aiding further attacks. The underlying issue is CWE-209 (Generation of Error Message Containing Sensitive Information)...

CVE-2024-49792

IBM ApplinX 11.1 is vulnerable to cross-site scripting. An authenticated user can embed arbitrary JavaScript in the Web UI, potentially altering functionality and leading to credential disclosure within a trusted session. CVSS v3.1 base score 5.4 (privileges: LOW, user interaction: REQUIRED, scop...

CVE-2024-49797

IBM ApplinX 11.1 is affected by CVE-2024-49797 due to failure to properly enable HTTP Strict Transport Security, enabling potential MITM access to sensitive information. The issue affects the Web transport of IBM ApplinX 11.1 and is described as an information disclosure vulnerability. The connec...

CVE-2024-49800

Affected product/versions: IBM ApplinX 11.1. Vulnerability: stores sensitive information in cleartext in memory, potentially obtainable by an authenticated user. Root cause/impact: information disclosure due to in-memory plaintext storage (CWE-316); confidentiality impact is High per NVD metrics....

CVE-2025-36408

CVE-2025-36408 affects IBM ApplinX 11.1. It is a stored cross-site scripting vulnerability, allowing an authenticated user to embed arbitrary JavaScript in the Web UI and potentially disclose credentials within a trusted session. Supported documents consistently identify the affected product/vers...

CVE-2025-36410

CVE-2025-36410 affects IBM ApplinX 11.1. An authenticated user could perform unauthorized administrative actions on the server due to server-side enforcement of client-side security. The Red Hat, CIRCL, NVD, and IBM bulletin entries corroborate the same description and indicate the issue resides ...

CVE-2025-36411

IBM ApplinX 11.1 is affected by a CSRF vulnerability (CVE-2025-36411) that could allow an attacker to perform malicious actions on behalf of a trusted user. The issue is documented across multiple sources (including Red Hat and IBM bulletin) with the same vulnerability description. The IBM securi...

CVE-2025-36419

IBM ApplinX 11.1 contains CVE-2025-36419, a vulnerability where server architecture information may be disclosed, potentially aiding further attacks. Affected component: server-side information exposure in IBM ApplinX 11.1 (CVE-2025-36419). Impact: confidentiality impact (C=L) with no stated inte...

CVE-2025-36418

IBM ApplinX 11.1 is affected by CVE-2025-36418, a privilege-escalation issue caused by improper verification of JWT tokens. This could allow an attacker to craft or modify a JSON Web Token to impersonate another user or elevate privileges. The Red Hat/others mirrors and IBM bulletin confirm the v...

CVE-2025-36409

IBM ApplinX 11.1 is affected by CVE-2025-36409: an authenticated user can perform cross-site scripting in the Web UI, potentially leaking credentials within a trusted session. Remediation: upgrade to a patched release (IBM ApplinX 11.1 update) via IBM Fix Central as described in IBM's security bu...