Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Tivoli Application Dependency Discovery Manager
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-3018 1 Ibm 1 Tivoli Application Dependency Discovery Manager 2018-06-28 5.0 MEDIUM 5.3 MEDIUM
The AXIS webapp in deploy-tomcat/axis in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2 and 7.2.0 through 7.2.1.4 allows remote attackers to obtain sensitive configuration information via a direct request, as demonstrated by happyaxis.jsp. IBM X-Force ID: 84354.
CVE-2013-4040 1 Ibm 1 Tivoli Application Dependency Discovery Manager 2018-06-13 2.1 LOW 5.5 MEDIUM
IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2.x before 7.2.1.5 and 7.2.x before 7.2.2.0 on Unix use weak permissions (755) for unspecified configuration and log files, which allows local users to obtain sensitive information by reading the files. IBM X-Force ID: 86176.
CVE-2016-8927 1 Ibm 1 Tivoli Application Dependency Discovery Manager 2017-04-20 3.5 LOW 5.4 MEDIUM
IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 118540.
CVE-2016-8926 1 Ibm 1 Tivoli Application Dependency Discovery Manager 2017-04-20 4.0 MEDIUM 4.3 MEDIUM
IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could allow a remote attacker to read system files or data that is restricted to authorized users. IBM X-Force ID: 118539.
CVE-2016-8925 1 Ibm 1 Tivoli Application Dependency Discovery Manager 2017-04-20 6.8 MEDIUM 6.5 MEDIUM
IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could allow a remote attacker to include arbitrary files which could allow the attacker to read any file on the system. IBM X-Force ID: 118538.