Known vulnerabilities in IBM Tivoli Monitoring - page 6

Software CPE: cpe:2.3:a:ibm_corporation:ibm_tivoli_monitoring:*:*:*:*:*:*:*:*
Total vulnerabilities: 257
Public exploits: 14
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Tivoli Monitoring IBM Tivoli Monitoring is affected by 257 known vulnerabilities: 5 critical, 44 high, 135 medium, 73 low Critical High Medium Low

Vulnerabilities (257)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80921 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-20453
CWE-611 High
No
No
- 20.09.2023 SB2023092037
SB2024110142
#VU80908 - Resource Management Errors
CVE-2015-5262
CWE-399 Medium
No
No
- 20.09.2023 SB2023092013
SB2023092037
SB2023092123
and 11 more
#VU78901 - Deserialization of Untrusted Data
CVE-2022-40609
CWE-502 High
No
No
- 03.08.2023 SB2023080307
SB2023080808
SB2023080809
and 56 more
#VU77813 - Configuration
CVE-2023-35890
CWE-16 Medium
No
No
6.3.0.7 Plus Service Pack 5 29.06.2023 SB2023062941
SB2023072560
SB2023090115
and 3 more
#VU77628 - Improper input validation
CVE-2012-6153
CWE-20 Medium
No
No
- 22.06.2023 SB2023062250
SB2023092013
SB2023092037
and 15 more
#VU76906 - Out-of-bounds read
CVE-2023-2597
CWE-125 High
No
No
6.3.0.7 Plus Service Pack 5 05.06.2023 SB2023060525
SB2023060705
SB2023060930
and 86 more
#VU76487 - Inadequate Encryption Strength
CVE-2023-32342
CWE-326 Medium
No
No
6.3.0.7 Plus Service Pack 5 24.05.2023 SB2023052446
SB2023060817
SB2023061605
and 25 more
#VU75686 - Improper Validation of Certificate with Host Mismatch
CVE-2022-39161
CWE-297 Low
No
No
6.3.0.7 Plus Service Pack 5 03.05.2023 SB2023050303
SB2023050304
SB2023063008
and 7 more
#VU75264 - Improper input validation
CVE-2023-21939
CWE-20 Medium
Available
No
6.3.0.7 Plus Service Pack 5 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75265 - Improper input validation
CVE-2023-21938
CWE-20 Low
No
No
6.3.0.7 Plus Service Pack 5 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 181 more
#VU75266 - Improper input validation
CVE-2023-21968
CWE-20 Low
No
No
6.3.0.7 Plus Service Pack 5 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75267 - Improper input validation
CVE-2023-21937
CWE-20 Low
No
No
6.3.0.7 Plus Service Pack 5 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 184 more
#VU75260 - Improper input validation
CVE-2023-21930
CWE-20 Medium
No
No
6.3.0.7 Plus Service Pack 5 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 191 more
#VU75261 - Improper input validation
CVE-2023-21967
CWE-20 Medium
No
No
- 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 189 more
#VU75262 - Improper input validation
CVE-2023-21954
CWE-20 Medium
No
No
- 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 166 more
#VU57150 - Improper Certificate Validation
CVE-2014-3577
CWE-295 Low
No
No
- 08.10.2021 SB2014082106
SB2021100807
SB2023020872
and 24 more
#VU52053 - Server-Side Request Forgery (SSRF)
CVE-2021-20480
CWE-918 Medium
No
No
- 12.04.2021 SB2021041218
SB2023092037
SB2024110142
#VU50852 - Cross-Site Request Forgery (CSRF)
CVE-2021-26296
CWE-352 Medium
Available
No
- 22.02.2021 SB2021022232
SB2023021547
SB2021062324
and 2 more
#VU30113 - Improper input validation
CVE-2020-5258
CWE-20 Low
No
No
- 16.07.2020 SB2020071699
SB2021072124
SB2021072134
and 17 more
#VU44897 - Exposure of sensitive information to an unauthorized actor
CVE-2011-1498
CWE-200 Medium
No
No
- 08.07.2011 SB2011070803
SB2023092037
SB2023101153
and 4 more


Showing elements 101 - 120 out of 257