Known vulnerabilities in IBM Tivoli Monitoring - page 4
Vendor:
IBM Corporation
Software:
IBM Tivoli Monitoring
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_tivoli_monitoring:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
257
Public exploits:
14
Known exploited (KEV):
3
Breakdown by Severity Chart
6.3.0.7 Service Pack 24
6.3.0.7 Service Pack 23
6.3.0.7 Service Pack 5
6.3.0.7 Service Pack 22
6.3.0.7 Service Pack 4
6.3.0.7 Service Pack 3
6.3.0.7 Service Pack 2
6.3.0.7 Service Pack 1
6.3.0.7 Service Pack 21
6.3.0.7 Service Pack 20
6.3.0.7 Service Pack 19
6.3.0.7 Service Pack 18
6.3.0.7 Service Pack 17
6.3.0.7 Service Pack 16
6.3.0.7 Service Pack 15
6.3.0.7 Service Pack 14
6.3.0 FP7 Service Pack 6
6.3.0.7 Service Pack 12
6.3.0.7 Service Pack 11
6.3.0.7 Service Pack 10
6.3.0.7 Service Pack 9
6.3.0.7 Service Pack 8
6.3.0.7 Service Pack 7
6.3.0.7 Service Pack 6
6.3.0.7 Service pack 13
6.3.0.7 Plus Service Pack 5
6.3.0 Fix Pack 7 Service Pack 5
6.3.0.7 Fix Pack 7 Service Pack 10
6.3.0.7
6.3.0.6
6.3.0.5
6.3.0
6.2.3.5
6.2.3.3
6.2.3.4
6.3.0.1
6.3.0.2
6.3.0.3
6.3.0.4
6.2.0.1
6.2.2.3
6.2.2.0
6.2.2.5
6.2.2.2
6.2.2.7
6.2.2.4
6.2.2.6
6.2.1.2
6.1.0.7
6.2.1.4
6.2.1.1
6.2.1.3
6.2.0.3
6.1.0
6.2.0.2
6.2.3.0
6.2.0
6.2.1
6.2.1.0
6.2.3.2
6.2.3.1
6.2.2.8
6.2.2.1
6.2.2.9
6.2.3
6.2.2
Vulnerabilities (257)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU95625 - Improper input validation CVE-2024-35154 |
CWE-20 | Low | 6.3.0.7 Plus Service Pack 5 | 09.08.2024 |
SB2024080941 SB2024081324 SB2024081439 and 11 more |
||
| #VU94503 - Server-Side Request Forgery (SSRF) CVE-2024-40898 |
CWE-918 | High | 6.3.0.7 Plus Service Pack 5 | 17.07.2024 |
SB20240717136 SB2024071896 SB2024081362 and 13 more |
||
| #VU93545 - Server-Side Request Forgery (SSRF) CVE-2024-39573 |
CWE-918 | Medium | 6.3.0.7 Plus Service Pack 5 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 46 more |
||
| #VU93544 - Improper input validation CVE-2024-38477 |
CWE-20 | Medium | 6.3.0.7 Plus Service Pack 5 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 58 more |
||
| #VU93543 - Server-Side Request Forgery (SSRF) CVE-2024-38476 |
CWE-918 | High | 6.3.0.7 Plus Service Pack 5 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 61 more |
||
| #VU93542 - Improper input validation CVE-2024-38475 |
CWE-20 | Critical | 6.3.0.7 Plus Service Pack 5 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 54 more |
||
| #VU93541 - Improper input validation CVE-2024-38474 |
CWE-20 | Medium | 6.3.0.7 Plus Service Pack 5 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 57 more |
||
| #VU93540 - Improper input validation CVE-2024-38473 |
CWE-20 | Medium | 6.3.0.7 Plus Service Pack 5 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 47 more |
||
| #VU93539 - Server-Side Request Forgery (SSRF) CVE-2024-38472 |
CWE-918 | Medium | 6.3.0.7 Plus Service Pack 5 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024081362 and 11 more |
||
| #VU93396 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-35153 |
CWE-79 | Medium | 6.3.0.7 Plus Service Pack 5 | 26.06.2024 |
SB2024062690 SB2024062708 SB2024062717 and 12 more |
||
| #VU91984 - Permissions, Privileges, and Access Controls CVE-2024-3933 |
CWE-264 | Low | 6.3.0 FP7 Service Pack 6 | 12.06.2024 |
SB2024061213 SB20240613101 SB20240613102 and 29 more |
||
| #VU89343 - Resource exhaustion CVE-2023-38264 |
CWE-400 | Medium | 6.3.0 FP7 Service Pack 6 | 10.05.2024 |
SB2024051027 SB2024051417 SB2024052007 and 70 more |
||
| #VU88977 - Resource exhaustion CVE-2024-25026 |
CWE-400 | Medium | 6.3.0.7 Plus Service Pack 5 | 24.04.2024 |
SB2024042458 SB2024042525 SB2024042626 and 68 more |
||
| #VU88803 - Server-Side Request Forgery (SSRF) CVE-2024-22329 |
CWE-918 | Medium | 6.3.0.7 Plus Service Pack 5 | 18.04.2024 |
SB2024041812 SB2024042613 SB2024043016 and 67 more |
||
| #VU88802 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2024-22354 |
CWE-611 | High | 6.3.0.7 Plus Service Pack 5 | 18.04.2024 |
SB2024041812 SB2024042628 SB2024050920 and 66 more |
||
| #VU88173 - Resource exhaustion CVE-2023-51775 |
CWE-400 | Medium | 6.3.0.7 Plus Service Pack 5 | 05.04.2024 |
SB2024040525 SB2024041129 SB2024041130 and 83 more |
||
| #VU88152 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2024-24795 |
CWE-113 | Medium | 6.3.0.7 Plus Service Pack 5 | 04.04.2024 |
SB2024040458 SB2024040502 SB2024040903 and 39 more |
||
| #VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-38709 |
CWE-113 | Medium | 6.3.0.7 Plus Service Pack 5 | 04.04.2024 |
SB2024040458 SB2024040502 SB2024040903 and 65 more |
||
| #VU88120 - Use of a Broken or Risky Cryptographic Algorithm CVE-2023-50313 |
CWE-327 | Low | 6.3.0.7 Plus Service Pack 5 | 04.04.2024 |
SB2024040414 SB2024040415 SB2024040439 and 16 more |
||
| #VU86230 - Resource exhaustion CVE-2023-52425 |
CWE-400 | Medium | 6.3.0.7 Plus Service Pack 5 | 07.02.2024 |
SB2024020750 SB2024020754 SB2024020765 and 120 more |
Showing elements 61 - 80 out of 257