cbcvebase.
CVE-2025-36408
published 2026-01-20

CVE-2025-36408: IBM ApplinX 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI…

medium6.4CVSS 3.1
AVNACLPRLUINSCCLILAN
IBM ApplinX 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected

2 ranges
VendorProductVersion rangeFixed in
ibmapplinx——
ibmapplinx——