Known vulnerabilities in IBM Tivoli Monitoring - page 6

Software CPE: cpe:2.3:a:ibm_corporation:ibm_tivoli_monitoring:*:*:*:*:*:*:*:*
Total vulnerabilities: 250
Public exploits: 14
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Tivoli Monitoring IBM Tivoli Monitoring is affected by 250 known vulnerabilities: 5 critical, 44 high, 131 medium, 70 low Critical High Medium Low

Vulnerabilities (250)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78901 - Deserialization of Untrusted Data
CVE-2022-40609
CWE-502 High
No
No
- 03.08.2023 SB2023080307
SB2023080808
SB2023080809
and 56 more
#VU77813 - Configuration
CVE-2023-35890
CWE-16 Medium
No
No
6.3.0.7 Plus Service Pack 5 29.06.2023 SB2023062941
SB2023072560
SB2023090115
and 3 more
#VU76906 - Out-of-bounds read
CVE-2023-2597
CWE-125 High
No
No
6.3.0.7 Plus Service Pack 5 05.06.2023 SB2023060525
SB2023060705
SB2023060930
and 86 more
#VU76487 - Inadequate Encryption Strength
CVE-2023-32342
CWE-326 Medium
No
No
6.3.0.7 Plus Service Pack 5 24.05.2023 SB2023052446
SB2023060817
SB2023061605
and 25 more
#VU76022 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-27554
CWE-611 Medium
No
No
6.3.0.7 Plus Service Pack 5 11.05.2023 SB2023051112
SB2023051523
SB2023051524
and 5 more
#VU75686 - Improper Validation of Certificate with Host Mismatch
CVE-2022-39161
CWE-297 Low
No
No
6.3.0.7 Plus Service Pack 5 03.05.2023 SB2023050303
SB2023050304
SB2023063008
and 7 more
#VU75531 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24966
CWE-79 Medium
No
No
6.3.0.7 Plus Service Pack 5 26.04.2023 SB2023042654
SB2023042747
SB2023042858
and 6 more
#VU75264 - Improper input validation
CVE-2023-21939
CWE-20 Medium
Available
No
6.3.0.7 Plus Service Pack 5 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75265 - Improper input validation
CVE-2023-21938
CWE-20 Low
No
No
6.3.0.7 Plus Service Pack 5 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 181 more
#VU75266 - Improper input validation
CVE-2023-21968
CWE-20 Low
No
No
6.3.0.7 Plus Service Pack 5 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75267 - Improper input validation
CVE-2023-21937
CWE-20 Low
No
No
6.3.0.7 Plus Service Pack 5 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 184 more
#VU75260 - Improper input validation
CVE-2023-21930
CWE-20 Medium
No
No
6.3.0.7 Plus Service Pack 5 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 191 more
#VU75262 - Improper input validation
CVE-2023-21954
CWE-20 Medium
No
No
- 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 166 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690
CWE-113 Medium
Available
No
6.3.0.7 Plus Service Pack 5 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 54 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998
CWE-770 Medium
Available
No
6.3.0.7 Plus Service Pack 5 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU71753 - Stack-based buffer overflow
CVE-2022-28331
CWE-121 High
No
No
- 02.02.2023 SB2023020208
SB2023022708
SB2023033122
and 5 more
#VU71288 - Improper input validation
CVE-2023-21830
CWE-20 Medium
No
No
- 17.01.2023 SB2023011784
SB2023011785
SB2023012377
and 112 more
#VU71289 - Improper input validation
CVE-2023-21843
CWE-20 Low
No
No
- 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 146 more
#VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-36760
CWE-444 Medium
No
No
- 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU62399 - Improper input validation
CVE-2022-21426
CWE-20 Medium
No
No
- 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 129 more


Showing elements 101 - 120 out of 250