License Metric Tool Security Vulnerabilities and Issues — License Metric Tool CVE List

Lucene search

IbmLicense Metric Tool

3 matches found

CVE•added 2015/05/20 10:59 a.m.•44 views

CVE-2014-8924

The server in IBM License Metric Tool 7.2.2 before IF15 and 7.5 before IF24 and Tivoli Asset Discovery for Distributed 7.2.2 before IF15 and 7.5 before IF24 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaratio...

6.4CVSS6.8AI score0.00285EPSS

CVE•added 2017/02/01 8:59 p.m.•39 views

CVE-2016-8961

IBM BigFix Inventory v9 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site th...

6.1CVSS5.9AI score0.00165EPSS

CVE•added 2015/05/25 2:59 p.m.•37 views

CVE-2014-4774

Cross-site request forgery (CSRF) vulnerability in the login page in IBM License Metric Tool 9 before 9.1.0.2 and Endpoint Manager for Software Use Analysis 9 before 9.1.0.2 allows remote attackers to hijack the authentication of arbitrary users via vectors involving a FRAME element.

6.8CVSS7.3AI score0.00103EPSS