Known vulnerabilities in IBM Tivoli Monitoring - page 4
Vendor:
IBM Corporation
Software:
IBM Tivoli Monitoring
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_tivoli_monitoring:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
250
Public exploits:
14
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
6.3.0.7 Service Pack 5
6.3.0.7 Service Pack 22
6.3.0.7 Service Pack 4
6.3.0.7 Service Pack 3
6.3.0.7 Service Pack 2
6.3.0.7 Service Pack 1
6.3.0.7 Service Pack 21
6.3.0.7 Service Pack 20
6.3.0.7 Service Pack 19
6.3.0.7 Service Pack 18
6.3.0.7 Service Pack 17
6.3.0.7 Service Pack 16
6.3.0.7 Service Pack 15
6.3.0.7 Service Pack 14
6.3.0 FP7 Service Pack 6
6.3.0.7 Service Pack 12
6.3.0.7 Service Pack 11
6.3.0.7 Service Pack 10
6.3.0.7 Service Pack 9
6.3.0.7 Service Pack 8
6.3.0.7 Service Pack 7
6.3.0.7 Service Pack 6
6.3.0.7 Service pack 13
6.3.0.7 Plus Service Pack 5
6.3.0 Fix Pack 7 Service Pack 5
6.3.0.7 Fix Pack 7 Service Pack 10
6.3.0.7
6.3.0.6
6.3.0.5
6.3.0
6.2.3.5
6.2.3.3
6.2.3.4
6.3.0.1
6.3.0.2
6.3.0.3
6.3.0.4
6.2.0.1
6.2.2.3
6.2.2.0
6.2.2.5
6.2.2.2
6.2.2.7
6.2.2.4
6.2.2.6
6.2.1.2
6.1.0.7
6.2.1.4
6.2.1.1
6.2.1.3
6.2.0.3
6.1.0
6.2.0.2
6.2.3.0
6.2.0
6.2.1
6.2.1.0
6.2.3.2
6.2.3.1
6.2.2.8
6.2.2.1
6.2.2.9
6.2.3
6.2.2
Vulnerabilities (250)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU93543 - Server-Side Request Forgery (SSRF) CVE-2024-38476 |
CWE-918 | High | 6.3.0.7 Plus Service Pack 5 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 61 more |
||
| #VU93542 - Improper input validation CVE-2024-38475 |
CWE-20 | Critical | 6.3.0.7 Plus Service Pack 5 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 54 more |
||
| #VU93541 - Improper input validation CVE-2024-38474 |
CWE-20 | Medium | 6.3.0.7 Plus Service Pack 5 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 57 more |
||
| #VU93540 - Improper input validation CVE-2024-38473 |
CWE-20 | Medium | 6.3.0.7 Plus Service Pack 5 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 47 more |
||
| #VU93539 - Server-Side Request Forgery (SSRF) CVE-2024-38472 |
CWE-918 | Medium | 6.3.0.7 Plus Service Pack 5 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024081362 and 11 more |
||
| #VU91984 - Permissions, Privileges, and Access Controls CVE-2024-3933 |
CWE-264 | Low | 6.3.0 FP7 Service Pack 6 | 12.06.2024 |
SB2024061213 SB20240613101 SB20240613102 and 29 more |
||
| #VU89343 - Resource exhaustion CVE-2023-38264 |
CWE-400 | Medium | 6.3.0 FP7 Service Pack 6 | 10.05.2024 |
SB2024051027 SB2024051417 SB2024052007 and 70 more |
||
| #VU88977 - Resource exhaustion CVE-2024-25026 |
CWE-400 | Medium | 6.3.0.7 Plus Service Pack 5 | 24.04.2024 |
SB2024042458 SB2024042525 SB2024042626 and 68 more |
||
| #VU88803 - Server-Side Request Forgery (SSRF) CVE-2024-22329 |
CWE-918 | Medium | 6.3.0.7 Plus Service Pack 5 | 18.04.2024 |
SB2024041812 SB2024042613 SB2024043016 and 67 more |
||
| #VU88802 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2024-22354 |
CWE-611 | High | 6.3.0.7 Plus Service Pack 5 | 18.04.2024 |
SB2024041812 SB2024042628 SB2024050920 and 66 more |
||
| #VU88665 - Improper input validation CVE-2024-21085 |
CWE-20 | Low | 6.3.0 FP7 Service Pack 6 | 17.04.2024 |
SB2024041764 SB2024041765 SB2024041796 and 125 more |
||
| #VU88666 - Improper input validation CVE-2024-21011 |
CWE-20 | Low | 6.3.0 FP7 Service Pack 6 | 17.04.2024 |
SB2024041764 SB2024041765 SB2024041766 and 132 more |
||
| #VU88668 - Improper input validation CVE-2024-21094 |
CWE-20 | Low | 6.3.0 FP7 Service Pack 6 | 17.04.2024 |
SB2024041764 SB2024041765 SB2024041766 and 126 more |
||
| #VU88173 - Resource exhaustion CVE-2023-51775 |
CWE-400 | Medium | 6.3.0.7 Plus Service Pack 5 | 05.04.2024 |
SB2024040525 SB2024041129 SB2024041130 and 83 more |
||
| #VU88152 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2024-24795 |
CWE-113 | Medium | 6.3.0.7 Plus Service Pack 5 | 04.04.2024 |
SB2024040458 SB2024040502 SB2024040903 and 38 more |
||
| #VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-38709 |
CWE-113 | Medium | 6.3.0.7 Plus Service Pack 5 | 04.04.2024 |
SB2024040458 SB2024040502 SB2024040903 and 62 more |
||
| #VU88120 - Use of a Broken or Risky Cryptographic Algorithm CVE-2023-50313 |
CWE-327 | Low | 6.3.0.7 Plus Service Pack 5 | 04.04.2024 |
SB2024040414 SB2024040415 SB2024040439 and 16 more |
||
| #VU86230 - Resource exhaustion CVE-2023-52425 |
CWE-400 | Medium | 6.3.0.7 Plus Service Pack 5 | 07.02.2024 |
SB2024020750 SB2024020754 SB2024020765 and 120 more |
||
| #VU82140 - Improper input validation CVE-2023-22067 |
CWE-20 | Medium | - | 17.10.2023 |
SB2023101797 SB2023101924 SB2023101990 and 117 more |
||
| #VU82141 - Improper input validation CVE-2023-22081 |
CWE-20 | Medium | - | 17.10.2023 |
SB2023101797 SB2023101798 SB2023101905 and 187 more |
Showing elements 61 - 80 out of 250