Known vulnerabilities in IBM Tivoli Monitoring - page 7

Software CPE: cpe:2.3:a:ibm_corporation:ibm_tivoli_monitoring:*:*:*:*:*:*:*:*
Total vulnerabilities: 257
Public exploits: 14
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Tivoli Monitoring IBM Tivoli Monitoring is affected by 257 known vulnerabilities: 5 critical, 44 high, 135 medium, 73 low Critical High Medium Low

Vulnerabilities (257)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76022 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-27554
CWE-611 Medium
No
No
6.3.0.7 Plus Service Pack 5 11.05.2023 SB2023051112
SB2023051523
SB2023051524
and 5 more
#VU75660 - Deserialization of Untrusted Data
CVE-2020-4450
CWE-502 High
No
No
- 02.05.2023 SB2020092114
#VU75658 - Improper Handling of Unexpected Data Type
CVE-2019-4670
CWE-241 Low
No
No
- 02.05.2023 SB2020092114
#VU75531 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24966
CWE-79 Medium
No
No
6.3.0.7 Plus Service Pack 5 26.04.2023 SB2023042654
SB2023042747
SB2023042858
and 6 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690
CWE-113 Medium
Available
No
6.3.0.7 Plus Service Pack 5 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 54 more
#VU72613 - Improper input validation
CVE-2023-26281
CWE-20 Medium
No
No
- 28.02.2023 SB2023022812
SB2023030209
SB2023033122
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998
CWE-770 Medium
Available
No
6.3.0.7 Plus Service Pack 5 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 203 more
#VU72144 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22473
CWE-200 Medium
No
No
6.3.0.7 Plus Service Pack 5 13.02.2023 SB2023021327
SB2023052409
SB2023071234
#VU71754 - Integer overflow
CVE-2022-25147
CWE-190 High
No
No
- 02.02.2023 SB2023020210
SB2023020212
SB2023020942
and 49 more
#VU71753 - Stack-based buffer overflow
CVE-2022-28331
CWE-121 High
No
No
- 02.02.2023 SB2023020208
SB2023022708
SB2023033122
and 5 more
#VU71288 - Improper input validation
CVE-2023-21830
CWE-20 Medium
No
No
- 17.01.2023 SB2023011784
SB2023011785
SB2023012377
and 112 more
#VU71289 - Improper input validation
CVE-2023-21843
CWE-20 Low
No
No
- 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 146 more
#VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-37436
CWE-113 Medium
No
No
- 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-36760
CWE-444 Medium
No
No
- 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71241 - Memory corruption
CVE-2006-20001
CWE-119 Medium
No
No
- 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 28 more
#VU67213 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34336
CWE-79 Medium
No
No
6.3.0.7 Plus Service Pack 5 13.09.2022 SB2022091320
SB2022111013
SB2023011123
and 2 more
#VU65294 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-22477
CWE-79 Medium
No
No
6.3.0.7 Plus Service Pack 5 14.07.2022 SB2022071406
SB2023021327
SB2023073130
#VU62399 - Improper input validation
CVE-2022-21426
CWE-20 Medium
No
No
- 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 129 more
#VU24938 - Command injection
CVE-2020-4163
CWE-77 Medium
No
No
- 05.02.2020 SB2020020508
SB2020092114
#VU20844 - Protection Mechanism Failure
CVE-2019-10086
CWE-693 Low
No
No
- 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more


Showing elements 121 - 140 out of 257