CVE-2024-40697

7.5 highEPSS 0.5%

High (7.5) in ibm common licensing. EPSS 0.5% chance of exploitation in the next 30 days.

IBM Common Licensing 9.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 297895.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWE: CWE-521
Published: 2024-08-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:common_licensing

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/297895
https://www.ibm.com/support/pages/node/7165250

Check your stack JSON