BaseFortify

Publication date: 2026-09-18

Last updated on: 2026-09-19

Assigner: IBM Corporation

Description

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-18

Last Modified

2026-09-19

Generated

2026-09-20

EPSS Evaluated

N/A

NVD

CVE-2026-1031

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-79	The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions have not been generated yet.

Hi! I’m here to help you understand CVE-2026-1031. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70