Known vulnerabilities in IBM Tivoli Network Manager (ITNM) - page 2

Vendor: IBM Corporation
Software: IBM Tivoli Network Manager (ITNM)
Software CPE: cpe:2.3:a:ibm_corporation:itnm:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 67
Public exploits: 9
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Tivoli Network Manager (ITNM) IBM Tivoli Network Manager (ITNM) is affected by 67 known vulnerabilities: 1 critical, 11 high, 36 medium, 19 low Critical High Medium Low

Vulnerabilities (67)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80940 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2009-4521		 CWE-79 Low
Available
No
 4.2.0.16 21.09.2023 SB2023092106
#VU80939 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-41033		 CWE-300 High
No
No
 4.2.0.16 21.09.2023 SB2023092106
SB2024050308
SB2024082844
and 1 more
#VU78413 - Improper input validation
CVE-2023-22045		 CWE-20 Low
No
No
 - 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 155 more
#VU78414 - Improper input validation
CVE-2023-22049		 CWE-20 Low
No
No
 - 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more
#VU78255 - Improper input validation
CVE-2015-0250		 CWE-20 Medium
No
No
 4.2.0.16 14.07.2023 SB2023071416
SB2023091137
SB2023092106
and 4 more
#VU77169 - Cryptographic Issues
CVE-2009-4269		 CWE-310 Low
No
No
 4.2.0.16 12.06.2023 SB2023061227
SB2023092106
#VU76906 - Out-of-bounds read
CVE-2023-2597		 CWE-125 High
No
No
 - 05.06.2023 SB2023060525
SB2023060705
SB2023060930
and 86 more
#VU75508 - Exposure of sensitive information to an unauthorized actor
CVE-2023-30441		 CWE-200 Medium
No
No
 - 26.04.2023 SB2023042618
SB2023042749
SB2023050107
and 41 more
#VU75265 - Improper input validation
CVE-2023-21938		 CWE-20 Low
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 181 more
#VU71715 - Deserialization of Untrusted Data
CVE-2023-23477		 CWE-502 Critical
No
No
 4.2.0.14 31.01.2023 SB2023013137
SB2023020111
SB2023020114
and 9 more
#VU68718 - Use After Free
CVE-2022-43680		 CWE-416 Medium
No
No
 4.2.0.17 25.10.2022 SB2022102560
SB2022102566
SB2022103010
and 99 more
#VU60181 - Resource Management Errors
CVE-2021-22569		 CWE-399 Medium
Available
No
 4.2.0.16 31.01.2022 SB2022013106
SB2022013107
SB2022041933
and 42 more
#VU56790 - Information Exposure Through Timing Discrepancy
CVE-2021-38153		 CWE-208 Low
No
No
 4.2.0.16 21.09.2021 SB2021092116
SB2022010906
SB2022012104
and 21 more
#VU52501 - Server-Side Request Forgery (SSRF)
CVE-2020-11987		 CWE-918 Medium
No
No
 4.2.0.16 23.04.2021 SB2021042315
SB2021042316
SB2021042514
and 32 more
#VU49795 - Improper input validation
CVE-2016-5725		 CWE-20 Medium
Available
No
 4.2.0.16 20.01.2021 SB2021012052
SB2021042512
SB2021042618
and 5 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649		 CWE-611 Medium
No
No
 4.2.0.16 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more
#VU29068 - Server-Side Request Forgery (SSRF)
CVE-2019-17566		 CWE-918 Medium
No
No
 4.2.0.16 16.06.2020 SB2020061613
SB2020062304
SB2020072310
and 23 more
#VU13180 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2017-5662		 CWE-611 Low
No
No
 4.2.0.16 05.06.2018 SB2018060503
SB2017050924
SB2023071416
and 7 more
#VU13059 - Deserialization of Untrusted Data
CVE-2018-8013		 CWE-502 Low
No
No
 4.2.0.16 30.05.2018 SB2018053011
SB2018060503
SB2019011705
and 16 more
#VU31399 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2017-9096		 CWE-611 High
No
No
 - 08.11.2017 SB2017110815
SB2020102845
SB2023042118
and 3 more


Showing elements 21 - 40 out of 67