CVE-2006-0513: ibm tivoli_access_manager_for_e-business

EPSS trend

Probability

9.49%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 9.49% on 21-09-2026

21-09-202621-10-2026

EPSS score

9.49%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (securitytracker.com)
Maturity: unknown
referenceUnverified
Exploit Reference (vsecurity.com)
Maturity: unknown
exploit-databasecgiVerified
IBM Tivoli Access Manager Plugin - Directory Traversal
Maturity: poc

References

10 links

lists.grok.org.uk/pipermail/full-disclosure/2006-February/041930.htmlMailing ListX Refsource FULLDISC
www-1.ibm.com/support/docview.wss?uid=swg24011562Vendor AdvisoryX Refsource AIXAPARPatch
www.vupen.com/english/advisories/2006/0442VDB EntryX Refsource VUPEN
securitytracker.com/id?1015582VDB EntryX Refsource SECTRACKExploitPatch
exchange.xforce.ibmcloud.com/vulnerabilities/24485VDB EntryX Refsource XF
www.securityfocus.com/archive/1/423946/100/0/threadedMailing ListX Refsource BUGTRAQ
securityreason.com/securityalert/412Third Party AdvisoryX Refsource SREASON
www.vsecurity.com/bulletins/advisories/2006/tam-file-retrieval.txtX Refsource MISCExploitPatchVendor Advisory
secunia.com/advisories/18725Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.securityfocus.com/bid/16494VDB EntryX Refsource BID

Related vulnerabilities

CVE-2008-5257ibmtivoli_access_manager_for_e-business1.23%17y ago27-11-2008 00:00webseald in WebSEAL 6.0.0.17 in IBM Tivoli Access Manager for e-business allows remote attackers to cause a denial of service (crash or hang) via HTTP requests, as demonstrated by a McAfee vulnerability scan.CVE-2011-0494ibmtivoli_access_manager_for_e-business2.14%15y ago19-01-2011 11:00Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 5.1 before 5.1.0.39-TIV-AWS-IF0040, 6.0 before 6.0.0.25-TIV-AWS-IF0026, 6.1.0 before 6.1.0.5-TIV-AWS-IF0006, and 6.1.1 before 6.1.1-TIV-AWS-FP0001 has unspecified impact and attack vectors. NOTE: this might overlap CVE-2010-4622.CVE-2010-4120ibmtivoli_access_manager_for_e-business2.94%15y ago28-10-2010 20:00Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via (1) the parm1 parameter to ivt/ivtserver, or the method parameter to (2) acl, (3) domain, (4) group, (5) gso, (6) gsogroup, (7) os, (8) pop, (9) rule, (10) user, or (11) webseal in ibm/wpm/.CVE-2010-4623ibmtivoli_access_manager_for_e-business1.13%15y ago30-12-2010 18:00WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows remote authenticated users to cause a denial of service (worker thread consumption) via shift-reload actions.CVE-2010-4622ibmtivoli_access_manager_for_e-business2.93%15y ago30-12-2010 18:00Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX allows remote attackers to read arbitrary files via a %uff0e%uff0e (encoded dot dot) in a URI.CVE-2017-1489ibmsecurity_access_manager+51.18%9y ago28-08-2017 20:00IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability. ECSSO Master Authentication can redirect to a server not participating in an e-community domain. IBM X-Force ID: 128687.

All vulnerabilities intivoli_access_manager_for_e-business

CVE-2006-0513: ibm tivoli_access_manager_for_e-business

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References