Known vulnerabilities in IBM Tivoli Monitoring

Software CPE: cpe:2.3:a:ibm_corporation:ibm_tivoli_monitoring:*:*:*:*:*:*:*:*
Total vulnerabilities: 250
Public exploits: 14
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Tivoli Monitoring IBM Tivoli Monitoring is affected by 250 known vulnerabilities: 5 critical, 44 high, 131 medium, 70 low Critical High Medium Low

Vulnerabilities (250)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139055 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-8646
CWE-444 High
No
No
6.3.0.7 Service Pack 22 22.07.2026 SB2026072215
SB2026072219
SB2026072328
and 16 more
#VU139054 - Resource exhaustion
CVE-2026-9320
CWE-400 Medium
No
No
6.3.0.7 Service Pack 22 22.07.2026 SB2026072214
SB2026072219
SB2026072328
and 16 more
#VU135090 - Improper Privilege Management
CVE-2026-3621
CWE-269 Medium
No
No
6.3.0.7 Service Pack 22 24.06.2026 SB2026062429
SB2026062430
SB20260626104
and 12 more
#VU133295 - Authentication Bypass by Spoofing
CVE-2026-8644
CWE-290 High
No
No
6.3.0.7 Service Pack 5 03.06.2026 SB2026060332
SB2026060333
SB2026060455
and 12 more
#VU133294 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-9311
CWE-94 High
No
No
6.3.0.7 Service Pack 5 03.06.2026 SB2026060330
SB2026060331
SB2026060455
and 13 more
#VU133292 - Deserialization of Untrusted Data
CVE-2026-9330
CWE-502 Low
No
No
6.3.0.7 Service Pack 5 03.06.2026 SB2026060328
SB2026060331
SB2026060455
and 13 more
#VU133289 - Deserialization of Untrusted Data
CVE-2026-9319
CWE-502 High
No
No
6.3.0.7 Service Pack 5 03.06.2026 SB2026060326
SB2026060327
SB2026060455
and 12 more
#VU132041 - Resource exhaustion
CVE-2026-4410
CWE-400 Low
No
No
6.3.0.7 Service Pack 5 21.05.2026 SB2026052124
SB2026060911
SB2026060912
and 9 more
#VU132031 - Security Features
CVE-2026-5516
CWE-254 Low
No
No
6.3.0.7 Service Pack 22 21.05.2026 SB2026052115
SB20260626104
SB2026071327
and 9 more
#VU117483 - Improper input validation
CVE-2025-53066
CWE-20 Medium
No
No
- 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 118 more
#VU117484 - Improper input validation
CVE-2025-53057
CWE-20 Medium
No
No
- 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 121 more
#VU116602 - Allocation of Resources Without Limits or Throttling
CVE-2025-36099
CWE-770 Low
No
No
6.3.0.7 Plus Service Pack 5 06.10.2025 SB2025100614
SB2025100616
SB2025100618
and 14 more
#VU114346 - Command injection
CVE-2025-7962
CWE-77 Medium
No
No
6.3.0.7 Plus Service Pack 5 21.08.2025 SB2025082145
SB2025082146
SB2025082147
and 54 more
#VU114097 - Improper Certificate Validation
CVE-2025-33142
CWE-295 Medium
No
No
6.3.0.7 Plus Service Pack 5 15.08.2025 SB2025081504
SB2025081894
SB2025081911
and 14 more
#VU112937 - Improper input validation
CVE-2025-30749
CWE-20 High
No
No
6.3.0 FP7 Service Pack 6 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 101 more
#VU112938 - Improper input validation
CVE-2025-50106
CWE-20 High
No
No
6.3.0 FP7 Service Pack 6 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 100 more
#VU112734 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-42516
CWE-113 Low
No
No
6.3.0.7 Plus Service Pack 5 10.07.2025 SB2025071040
SB2025071710
SB2025071764
and 34 more
#VU112733 - Server-Side Request Forgery (SSRF)
CVE-2024-43204
CWE-918 Low
No
No
6.3.0.7 Plus Service Pack 5 10.07.2025 SB2025071040
SB2025071710
SB2025071764
and 28 more
#VU112732 - Server-Side Request Forgery (SSRF)
CVE-2024-43394
CWE-918 Medium
No
No
6.3.0.7 Plus Service Pack 5 10.07.2025 SB2025071040
SB2025071710
SB2025072111
and 8 more
#VU111162 - Resource exhaustion
CVE-2025-48976
CWE-400 Medium
Available
No
6.3.0.7 Plus Service Pack 5 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 156 more


Showing elements 1 - 20 out of 250