Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Tivoli Monitoring
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-4592 1 Ibm 1 Tivoli Monitoring 2020-08-24 5.0 MEDIUM 7.5 HIGH
IBM Tivoli Monitoring Service 6.3.0.7.3 through 6.3.0.7.10 could allow an unauthorized user to access and modify operation aspects of the ITM monitoring server possibly leading to an effective denial of service or disabling of the monitoring server. IBM X-Force ID: 167647.
CVE-2020-4311 1 Ibm 1 Tivoli Monitoring 2020-04-28 6.9 MEDIUM 7.0 HIGH
IBM Tivoli Monitoring 6.3.0 could allow a local attacker to execute arbitrary code on the system. By placing a specially crafted file, an attacker could exploit this vulnerability to load other DLL files located in the same directory and execute arbitrary code on the system. IBM X-Force ID: 177083.
CVE-2017-1794 1 Ibm 1 Tivoli Monitoring 2019-10-09 6.0 MEDIUM 7.5 HIGH
IBM Tivoli Monitoring 6.2.3 through 6.2.3.5 and 6.3.0 through 6.3.0.7 are vulnerable to both TEPS user privilege escalation and possible denial of service due to unconstrained memory growth. IBM X-Force ID: 137039.
CVE-2017-1181 1 Ibm 1 Tivoli Monitoring 2019-10-03 1.9 LOW 7.0 HIGH
IBM Tivoli Monitoring Portal V6 client could allow a local attacker to gain elevated privileges for IBM Tivoli Monitoring, caused by the default console connection not being encrypted. IBM X-Force ID: 123487.
CVE-2017-1182 1 Ibm 1 Tivoli Monitoring 2019-10-03 5.4 MEDIUM 7.5 HIGH
IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to execute arbitrary commands on the system, when default client-server default communications, HTTP, are being used. IBM X-Force ID: 123493.
CVE-2017-1635 1 Ibm 1 Tivoli Monitoring 2017-12-27 5.2 MEDIUM 8.0 HIGH
IBM Tivoli Monitoring V6 6.2.2.x could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free error. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 133243.
CVE-2017-1183 1 Ibm 1 Tivoli Monitoring 2017-07-20 5.4 MEDIUM 7.5 HIGH
IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to modify SQL commands to the Portal Server, when default client-server communications, HTTP, are being used. IBM X-Force ID: 123494.
CVE-2015-5003 1 Ibm 1 Tivoli Monitoring 2016-12-06 8.5 HIGH 8.5 HIGH
The portal in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 before FP7 allows remote authenticated users to execute arbitrary commands by leveraging Take Action view authority and providing crafted input.
CVE-2016-2946 2 Ibm, Linux 2 Tivoli Monitoring, Linux Kernel 2016-12-01 7.2 HIGH 7.8 HIGH
Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring (ITM) 6.2.2 before FP9, 6.2.3 before FP5, and 6.3.0 before FP2 on Linux and UNIX allows local users to gain privileges via unspecified vectors.