Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

29 records in Tivoli Monitoring · all components

TI-2025-02945 CVE-2025-3357 · GHSA-f5w7-cjpw-qq45

IBM Tivoli Monitoring code execution

Priority MEDIUM 51

IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 19 could allow a remote attacker to execute arbitrary code due to improper validation of an index value of a dynamically allocated array.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01102 Published 2025-05-28 No fix listed CWE-1285
TI-2017-01388 CVE-2017-1789 · GHSA-7phg-9j65-8vgw

Code injection in IBM Tivoli Monitoring V6

Priority MEDIUM 48

IBM Tivoli Monitoring V6 6.2.3 and 6.3.0 could allow an unauthenticated user to remotely execute code through unspecified methods.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03166 Published 2018-03-22 No fix listed CWE-94
TI-2025-02942 CVE-2025-3354 · GHSA-854p-fxw9-mq4h

IBM Tivoli Monitoring code execution

Priority MEDIUM 44

IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.006 Published 2025-08-06 No fix listed CWE-122
TI-2025-02908 CVE-2025-3320 · GHSA-x84x-v7cc-jrvg

IBM Tivoli Monitoring code execution

Priority MEDIUM 44

IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.006 Published 2025-08-06 No fix listed CWE-122
Priority MEDIUM 43

The portal in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 before FP7 allows remote authenticated users to execute arbitrary commands by leveraging Take Action view authority and providing…

CVSS 3.0HIGH 8.5 Network Low privileges No interaction EPSS 0.03351 Published 2016-01-03 No fix listed CWE-77
TI-2017-01294 CVE-2017-1635 · GHSA-2pv2-hm64-84jm

Use after free in IBM Tivoli Monitoring V6

Priority MEDIUM 40

IBM Tivoli Monitoring V6 6.2.2.x could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free error.

CVSS 3.0HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.03088 Published 2017-12-13 No fix listed CWE-416
Priority MEDIUM 40

IBM Tivoli Monitoring (ITM) 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, 6.2.3 through FP05, and 6.3.0 before FP04 allows remote authenticated users to bypass intended access restrictions and execute arbit…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.01758 Published 2015-02-02 No fix listed CWE-264
Priority LOW 35

IBM Tivoli Monitoring 6.2.3 through 6.2.3.5 and 6.3.0 through 6.3.0.7 are vulnerable to both TEPS user privilege escalation and possible denial of service due to unconstrained memory growth.

CVSS 3.0HIGH 7.5 Network Low privileges No interaction EPSS 0.01225 Published 2018-09-19 No fix listed CWE-400
TI-2017-00966 CVE-2017-1183 · GHSA-66vv-9pj3-6mfw

SQL injection in IBM Tivoli Monitoring V6

Priority LOW 34

IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to modify SQL commands to the Portal Server, when default client-server communications, HTTP, are being used.

CVSS 3.0HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00747 Published 2017-07-14 No fix listed CWE-89
Priority LOW 34

Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring (ITM) 6.2.2 before FP9, 6.2.3 before FP5, and 6.3.0 before FP2 on Linux and UNIX allows local users to gain privileges via unsp…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00406 Published 2016-12-01 No fix listed CWE-119
Priority LOW 30

IBM Tivoli Monitoring Portal V6 client could allow a local attacker to gain elevated privileges for IBM Tivoli Monitoring, caused by the default console connection not being encrypted.

CVSS 3.0HIGH 7.0 Local Low privileges No interaction EPSS 0.00224 Published 2017-07-14 No fix listed CWE-319
Priority LOW 28

Buffer overflow in KDSMAIN in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Busine…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02555 Published 2013-06-21 No fix listed CWE-119
Priority LOW 27

IBM Tivoli Monitoring V6 could allow an unauthenticated user to access SOAP queries that could contain sensitive information.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01302 Published 2017-06-27 No fix listed CWE-200
Load more
Open these records in search →