IBM Tivoli Monitoring V6 vulnerabilities
6 vulnerabilities
Known vulnerabilities in IBM Tivoli Monitoring V6, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2016-6083ibmtivoli_monitoring+1
EPSS score1.30%
IBM Tivoli Monitoring V6 could allow an unauthenticated user to access SOAP queries that could contain sensitive information. IBM X-Force ID: 117696.CVE-2017-1182ibmtivoli_monitoring+1EPSS score8.54%
IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to execute arbitrary commands on the system, when default client-server default communications, HTTP, are being used. IBM X-Force ID: 123493.CVE-2017-1789ibmtivoli_monitoring+1EPSS score3.17%
IBM Tivoli Monitoring V6 6.2.3 and 6.3.0 could allow an unauthenticated user to remotely execute code through unspecified methods. IBM X-Force ID: 137034.CVE-2017-1635ibmtivoli_monitoring+1EPSS score3.09%
IBM Tivoli Monitoring V6 6.2.2.x could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free error. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 133243.CVE-2017-1183ibmtivoli_monitoring+1EPSS score0.75%
IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to modify SQL commands to the Portal Server, when default client-server communications, HTTP, are being used. IBM X-Force ID: 123494.CVE-2017-1181ibmtivoli_monitoring+1EPSS score0.22%
IBM Tivoli Monitoring Portal V6 client could allow a local attacker to gain elevated privileges for IBM Tivoli Monitoring, caused by the default console connection not being encrypted. IBM X-Force ID: 123487.