CVE-2014-8927: Common Inventory Technology (CIT) before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint...

Security readout for executives and security teams

This vulnerability can let a remote attacker disrupt affected IBM licensing and asset inventory systems by sending a malformed XML query. The reported impact is denial of service through high CPU use or application crash, not data theft or code execution. Exposure is likely limited to organizations running the named IBM inventory and license-management products with CIT before 2.7.0.2050, particularly where untrusted users or networks can reach the XML query-handling service. Treat this as a service-availability risk for IBM asset and license-management infrastructure. Prioritize if these systems support compliance, audits, or operational inventory workflows and are reachable beyond trusted administration networks. Mitigation focus: Identify affected IBM products and embedded CIT versions.; Update CIT to 2.7.0.2050 or IBM-recommended later guidance.; Restrict network access to inventory and license-management services..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.