CVE-2024-41774

Summary

CVE-2024-41774 is a stored cross-site scripting (XSS) vulnerability affecting IBM Common Licensing 9.0. A privileged user can exploit this weakness by embedding malicious JavaScript code in the Web UI, altering intended functionality, and potentially disclosing sensitive credentials within a trusted session. This issue, identified as IBM X-Force ID: 350348, poses a significant risk to organizations using this software, making it crucial for IBM to release a patch or mitigation strategy promptly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.