IBM License Metric Tool Vulnerabilities

CERT-Bund has published a security advisory (WID-SEC-2026-0881) detailing multiple vulnerabilities affecting IBM License Metric Tool versions earlier than 9.2.43. The advisory notes a CVSS base score of 7.5, indicating a high severity, and a temporal score of 6.5. These vulnerabilities can be exploited remotely to disclose information, execute cross-site scripting (XSS) attacks, or cause a denial of service (DoS).

Organizations utilizing IBM License Metric Tool should immediately review their installed versions and apply available mitigations. The advisory indicates that affected operating systems include Linux, UNIX, and Windows. Affected product versions are IBM License Metric Tool <9.2.43. Prompt action is recommended to address these security risks and prevent potential exploitation.