Cross-Site Request Forgery Vulnerability in IBM Common Licensing Agent
CVE-2025-15399

10CRITICAL

Key Information:

Vendor

IBM
Status
Common Licensing
Vendor
CVE Published:
18 September 2026

What is CVE-2025-15399?

The IBM Common Licensing Agent and ART products are susceptible to cross-site request forgery (CSRF), which could enable an attacker to perform unauthorized actions on behalf of a legitimate user. By exploiting this flaw, malicious actors may use trusted user credentials to execute harmful commands. It is crucial for users and administrators of affected versions to implement appropriate security measures and apply available patches to mitigate this risk.

Affected Version(s)

Common Licensing Agent 9.0

Common Licensing Agent 9.0.0.1

Common Licensing Agent 9.0.0.2

References

https://www.ibm.com/support/pages/node/7286490
vendor-advisorypatch

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.