Known vulnerabilities in IBM Tivoli Monitoring - page 2

Software CPE: cpe:2.3:a:ibm_corporation:ibm_tivoli_monitoring:*:*:*:*:*:*:*:*
Total vulnerabilities: 257
Public exploits: 14
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Tivoli Monitoring IBM Tivoli Monitoring is affected by 257 known vulnerabilities: 5 critical, 44 high, 135 medium, 73 low Critical High Medium Low

Vulnerabilities (257)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114097 - Improper Certificate Validation
CVE-2025-33142
CWE-295 Medium
No
No
6.3.0.7 Plus Service Pack 5 15.08.2025 SB2025081504
SB2025081894
SB2025081911
and 14 more
#VU113665 - Heap-based Buffer Overflow
CVE-2025-3320
CWE-122 High
No
No
6.3.0.7 Service Pack 21 06.08.2025 SB2025080610
#VU113664 - Heap-based Buffer Overflow
CVE-2025-3354
CWE-122 High
No
No
6.3.0.7 Service Pack 21 06.08.2025 SB2025080610
#VU113345 - Improper Validation of Array Index
CVE-2025-3357
CWE-129 Critical
No
No
- 28.07.2025 SB2025072810
SB2025072811
#VU112940 - Improper input validation
CVE-2025-30761
CWE-20 Medium
No
No
6.3.0 FP7 Service Pack 6 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 77 more
#VU112941 - Improper input validation
CVE-2025-30754
CWE-20 Medium
No
No
6.3.0 FP7 Service Pack 6 16.07.2025 SB2025071686
SB2025071692
SB2025071783
and 108 more
#VU112937 - Improper input validation
CVE-2025-30749
CWE-20 High
No
No
6.3.0 FP7 Service Pack 6 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 101 more
#VU112938 - Improper input validation
CVE-2025-50106
CWE-20 High
No
No
6.3.0 FP7 Service Pack 6 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 100 more
#VU112734 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-42516
CWE-113 Low
No
No
6.3.0.7 Plus Service Pack 5 10.07.2025 SB2025071040
SB2025071710
SB2025071764
and 37 more
#VU112732 - Server-Side Request Forgery (SSRF)
CVE-2024-43394
CWE-918 Medium
No
No
6.3.0.7 Plus Service Pack 5 10.07.2025 SB2025071040
SB2025071710
SB2025072111
and 8 more
#VU111988 - Deserialization of Untrusted Data
CVE-2025-36038
CWE-502 Critical
No
No
6.3.0.7 Plus Service Pack 5 27.06.2025 SB2025062708
SB2025063083
SB2025070944
and 14 more
#VU109860 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-33104
CWE-79 Low
No
No
6.3.0.7 Plus Service Pack 5 27.05.2025 SB2025052752
SB2025052753
SB2025052908
and 6 more
#VU107856 - Server-Side Request Forgery (SSRF)
CVE-2025-27907
CWE-918 Medium
No
No
6.3.0.7 Plus Service Pack 5 23.04.2025 SB2025042309
SB2025042318
SB2025042345
and 11 more
#VU100521 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45087
CWE-79 Medium
No
No
6.3.0.7 Plus Service Pack 5 15.11.2024 SB2024111525
SB2024112217
SB2024112515
and 6 more
#VU99760 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-45086
CWE-611 Medium
No
No
6.3.0.7 Plus Service Pack 5 05.11.2024 SB2024110544
SB2024110623
SB2024110629
and 8 more
#VU99601 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-5016
CWE-22 Low
No
No
6.3.0.7 Plus Service Pack 5 01.11.2024 SB2024110141
SB2024110142
SB2025012306
#VU99600 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-20354
CWE-22 Medium
No
No
6.3.0.7 Plus Service Pack 5 01.11.2024 SB2024110140
SB2024110142
SB2025012306
#VU99598 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-4949
CWE-611 High
No
No
6.3.0.7 Plus Service Pack 5 01.11.2024 SB2024110137
SB2024110142
SB2025012306
#VU60738 - Integer overflow
CVE-2022-25314
CWE-190 Medium
No
No
6.3.0.7 Service Pack 12 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 68 more
#VU50683 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-20353
CWE-611 Medium
No
No
6.3.0.7 Plus Service Pack 5 15.02.2021 SB2021021504
SB2025012306


Showing elements 21 - 40 out of 257