Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

8 records in Tivoli Storage Manager Client · all components

Priority HIGH 81

Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, and 5.4.0.0 thro…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.71468 Published 2009-05-05 No fix listed CWE-119
Priority MEDIUM 56

Heap-based buffer overflow in the Data Protection for SQL CAD service (aka dsmcat.exe) in the Client Acceptor Daemon (CAD) and the scheduler in the Backup-Archive client 5.1.0.0 through 5.1.8.1, 5.2.0.0 through 5.2.5.2,…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.11379 Published 2008-10-30 No fix listed CWE-119
Priority MEDIUM 49

Buffer overflow in the Web GUI in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17 allows attack…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03339 Published 2009-05-05 No fix listed CWE-119
Priority LOW 27

Unspecified vulnerability in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2, when using "server-initiated prompted scheduling," allows…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02025 Published 2007-09-21 No fix listed CWE-200
Priority LOW 23

Cross-site scripting (XSS) vulnerability in the CAD service in IBM Tivoli Storage Manager (TSM) Client 5.3.5.3 and 5.4.1.2 for Windows allows remote attackers to inject arbitrary web script or HTML via HTTP requests to p…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01223 Published 2007-10-30 No fix listed CWE-79
Open these records in search →