Applinx

Vendor:

First CVE: Feb 6, 2025 · Active for 1 year

15
Total CVEs
More Total CVEs than 92% of tracked products
7.5
Avg CVEs / Year
Higher CVE frequency than 93% of tracked products
5.4
Avg CVSS
Higher Avg CVSS than 14% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Applinx over time

Volume of CVEsAvg CVSS Base Score
First CVE
Feb 6, 2025
17 months ago
Most Recent CVE
Jan 20, 2026
185 days ago

CVE Severity & Scoring

Applinx15 CVEs
All CVEs352,231 CVEs
LowMediumCritical
Attack Vector
Local0 (0.0%)
Network15 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low14 (93.3%)
High1 (6.7%)
Unknown0 (0.0%)
User Interaction
None7 (46.7%)
Unknown0 (0.0%)
Required8 (53.3%)
Privileges Required
Low10 (66.7%)
High0 (0.0%)
None5 (33.3%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (15 CVEs).

15 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2025-36418CRITICAL
IBM ApplinX 11.1 is vulnerable due to a privilege escalation vulnerability due to improper verification of JWT tokens. An attacker may be able to craft or modify a JSON web token i
Jan 20, 20269.830NONO
CVE-2025-36408MEDIUM
IBM ApplinX 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the in
Jan 20, 20266.422NONO
CVE-2025-36410MEDIUM
IBM ApplinX 11.1 could allow an authenticated user to perform unauthorized administrative actions on the server due to server-side enforcement of client-side security.
Jan 20, 20264.321NONO
CVE-2025-36419MEDIUM
IBM ApplinX 11.1 could disclose sensitive information about server architecture that could aid in further attacks against the system.
Jan 20, 20265.320NONO
CVE-2025-36409MEDIUM
IBM ApplinX 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended
Jan 20, 20265.420NONO
CVE-2025-36411LOW
IBM ApplinX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website tr
Jan 20, 20263.519NONO
CVE-2024-49800MEDIUM
IBM ApplinX 11.1 stores sensitive information in cleartext in memory that could be obtained by an authenticated user.
Feb 6, 20256.518NONO
CVE-2024-49797MEDIUM
IBM ApplinX 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit t
Feb 6, 20255.917NONO
CVE-2024-49796MEDIUM
IBM ApplinX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit th
Feb 6, 20255.417NONO
CVE-2024-49798MEDIUM
IBM ApplinX 11.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in
Feb 6, 20254.315NONO
View all 15 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (15 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (15 CVEs).

Media Mentions

Signals from CVEs in this product scope (15 CVEs).

Top CNAs Publishing CVEs For Applinx

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
11.1.0155.40.2%00