cbcvebase.
CVE-2025-36409
published 2026-01-20

CVE-2025-36409: IBM ApplinX 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus…

medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
IBM ApplinX 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected

2 ranges
VendorProductVersion rangeFixed in
ibmapplinx——
ibmapplinx——