IBM Corporation Tivoli Storage Manager Extended Edition vulnerabilities

4 vulnerabilities

Known vulnerabilities in IBM Corporation Tivoli Storage Manager Extended Edition, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2016-6044ibm corporationtivoli storage manager extended edition+1
EPSS score
0.59%
IBM Tivoli Storage Manager Operations Center could allow an authenticated attacker to enable or disable the application's REST API, which may let the attacker violate security policy.8.8CVE-2016-6045ibm corporationtivoli storage manager extended edition+1
EPSS score
0.55%
IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.7CVE-2016-6043ibm corporationtivoli storage manager extended edition+1
EPSS score
0.23%
Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to session expiration not being enforced.5.4CVE-2016-6046ibm corporationtivoli storage manager extended edition+1
EPSS score
0.54%
IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.