Known vulnerabilities in IBM Tivoli Network Manager (ITNM) - page 3

Vendor: IBM Corporation
Software: IBM Tivoli Network Manager (ITNM)
Software CPE: cpe:2.3:a:ibm_corporation:itnm:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 67
Public exploits: 9
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Tivoli Network Manager (ITNM) IBM Tivoli Network Manager (ITNM) is affected by 67 known vulnerabilities: 1 critical, 11 high, 36 medium, 19 low Critical High Medium Low

Vulnerabilities (67)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67532 - Use After Free
CVE-2022-40674		 CWE-416 High
No
No
 4.2.0.16 21.09.2022 SB2022092118
SB2022092119
SB2022092317
and 111 more
#VU65831 - Improper input validation
CVE-2022-2047		 CWE-20 Low
No
No
 4.2.0.16 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 41 more
#VU65830 - Resource Management Errors
CVE-2022-2048		 CWE-399 Medium
No
No
 4.2.0.16 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 44 more
#VU64945 - Improper input validation
CVE-2020-10693		 CWE-20 Medium
No
No
 4.2.0.15 06.07.2022 SB2022070611
SB2023011849
SB2020121576
and 5 more
#VU62849 - Creation of Temporary File With Insecure Permissions
CVE-2022-24823		 CWE-378 Low
No
No
 4.2.0.16 09.05.2022 SB2022050902
SB2022063002
SB2022072013
and 55 more
#VU62400 - Improper input validation
CVE-2022-21496		 CWE-20 Medium
No
No
 - 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 118 more
#VU62401 - Improper input validation
CVE-2022-21434		 CWE-20 Medium
No
No
 - 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 111 more
#VU62402 - Improper input validation
CVE-2022-21443		 CWE-20 Low
No
No
 - 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 109 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 4.2.0.16 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU61671 - Memory corruption
CVE-2018-25032		 CWE-119 Medium
No
No
 4.2.0.15 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU59727 - Improper input validation
CVE-2022-21299		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 105 more
#VU59717 - Improper input validation
CVE-2019-10219		 CWE-20 Medium
No
No
 4.2.0.15 18.01.2022 SB2022011837
SB2022070611
SB2022083134
and 4 more
#VU57493 - Improper input validation
CVE-2021-35561		 CWE-20 Medium
No
No
 - 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 94 more
#VU51939 - Improper input validation
CVE-2021-22696		 CWE-20 Medium
No
No
 4.2.0.13 06.04.2021 SB2021040608
SB2021120219
SB2021120336
and 8 more
#VU27960 - Deserialization of Untrusted Data
CVE-2019-17571		 CWE-502 High
No
No
 4.2.0.15 18.05.2020 SB2019122027
SB2020051806
SB2020011497
and 28 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 4.2.0.16 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 4.2.0.16 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 4.2.0.16 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU36773 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2018-15494		 CWE-74 High
No
No
 4.2.0.15 18.08.2018 SB2018081804
SB2022070505
SB2022082433
and 11 more
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-9251		 CWE-79 Low
No
No
 4.2.0.16 31.07.2018 SB2018080106
SB2019011705
SB2019100301
and 63 more


Showing elements 41 - 60 out of 67