What is GHSA-2vwg-4434-qc95?

GHSA-2vwg-4434-qc95 is a security advisory published by GitHub Security Advisories with Critical severity. IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0...

Which CVE IDs does GHSA-2vwg-4434-qc95 cover?

GHSA-2vwg-4434-qc95 covers the following CVE IDs: CVE-2025-15399. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2vwg-4434-qc95?

GHSA-2vwg-4434-qc95 has a CVSS v3 base score of 10.0, published by GitHub Security Advisories.

GHSA-2vwg-4434-qc95CriticalCVSS 10.0

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0...

Vendor

GitHub Security Advisories

Published

September 18, 2026

Last Modified

September 18, 2026

🔗 CVE IDs covered (1)

CVE-2025-15399 →

📋 Description

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-15399
https://www.ibm.com/support/pages/node/7286490
https://github.com/advisories/GHSA-2vwg-4434-qc95