Known vulnerabilities in IBM Tivoli Monitoring - page 2

Software CPE: cpe:2.3:a:ibm_corporation:ibm_tivoli_monitoring:*:*:*:*:*:*:*:*
Total vulnerabilities: 250
Public exploits: 14
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Tivoli Monitoring IBM Tivoli Monitoring is affected by 250 known vulnerabilities: 5 critical, 44 high, 131 medium, 70 low Critical High Medium Low

Vulnerabilities (250)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113665 - Heap-based Buffer Overflow
CVE-2025-3320
CWE-122 High
No
No
6.3.0.7 Service Pack 21 06.08.2025 SB2025080610
#VU113664 - Heap-based Buffer Overflow
CVE-2025-3354
CWE-122 High
No
No
6.3.0.7 Service Pack 21 06.08.2025 SB2025080610
#VU113345 - Improper Validation of Array Index
CVE-2025-3357
CWE-129 Critical
No
No
- 28.07.2025 SB2025072810
SB2025072811
#VU112940 - Improper input validation
CVE-2025-30761
CWE-20 Medium
No
No
6.3.0 FP7 Service Pack 6 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 77 more
#VU112941 - Improper input validation
CVE-2025-30754
CWE-20 Medium
No
No
6.3.0 FP7 Service Pack 6 16.07.2025 SB2025071686
SB2025071692
SB2025071783
and 108 more
#VU111988 - Deserialization of Untrusted Data
CVE-2025-36038
CWE-502 Critical
No
No
6.3.0.7 Plus Service Pack 5 27.06.2025 SB2025062708
SB2025063083
SB2025070944
and 14 more
#VU109860 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-33104
CWE-79 Low
No
No
6.3.0.7 Plus Service Pack 5 27.05.2025 SB2025052752
SB2025052753
SB2025052908
and 6 more
#VU107856 - Server-Side Request Forgery (SSRF)
CVE-2025-27907
CWE-918 Medium
No
No
6.3.0.7 Plus Service Pack 5 23.04.2025 SB2025042309
SB2025042318
SB2025042345
and 11 more
#VU101344 - Integer overflow
CVE-2024-10917
CWE-190 Low
No
No
6.3.0 FP7 Service Pack 6 09.12.2024 SB2024120927
SB2024120928
SB2024120929
and 66 more
#VU100521 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45087
CWE-79 Medium
No
No
6.3.0.7 Plus Service Pack 5 15.11.2024 SB2024111525
SB2024112217
SB2024112515
and 6 more
#VU99760 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-45086
CWE-611 Medium
No
No
6.3.0.7 Plus Service Pack 5 05.11.2024 SB2024110544
SB2024110623
SB2024110629
and 8 more
#VU99601 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-5016
CWE-22 Low
No
No
6.3.0.7 Plus Service Pack 5 01.11.2024 SB2024110141
SB2024110142
SB2025012306
#VU99600 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-20354
CWE-22 Medium
No
No
6.3.0.7 Plus Service Pack 5 01.11.2024 SB2024110140
SB2024110142
SB2025012306
#VU99598 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-4949
CWE-611 High
No
No
6.3.0.7 Plus Service Pack 5 01.11.2024 SB2024110137
SB2024110142
SB2025012306
#VU98644 - Improper input validation
CVE-2024-21235
CWE-20 Medium
No
No
6.3.0 FP7 Service Pack 6 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 129 more
#VU98645 - Improper input validation
CVE-2024-21210
CWE-20 Low
No
No
6.3.0 FP7 Service Pack 6 15.10.2024 SB20241015215
SB2024101668
SB2024101672
and 122 more
#VU98647 - Improper input validation
CVE-2024-21208
CWE-20 Low
No
No
6.3.0 FP7 Service Pack 6 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 139 more
#VU98648 - Improper input validation
CVE-2024-21217
CWE-20 Low
No
No
6.3.0 FP7 Service Pack 6 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 142 more
#VU60738 - Integer overflow
CVE-2022-25314
CWE-190 Medium
No
No
6.3.0.7 Service Pack 12 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 68 more
#VU50683 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-20353
CWE-611 Medium
No
No
6.3.0.7 Plus Service Pack 5 15.02.2021 SB2021021504
SB2025012306


Showing elements 21 - 40 out of 250