CVSS: 8.0EPSS: 0%CPEs: 9EXPL: 2CVE-2017-1635
https://notcve.org/view.php?id=CVE-2017-1635
13 Dec 2017 — IBM Tivoli Monitoring V6 6.2.2.x could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free error. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 133243. IBM Tivoli Monitoring V6 6.2.2.x podría permitir que un atacante remoto ejecute código arbitrario en el sistema, provocado por un error de uso de memoria previamente liberada. Un atacante remoto podría explotar esta vulnerab... • https://github.com/emcalv/tivoli-poc • CWE-416: Use After Free •
CVSS: 7.0EPSS: 0%CPEs: 3EXPL: 0CVE-2017-1181
https://notcve.org/view.php?id=CVE-2017-1181
14 Jul 2017 — IBM Tivoli Monitoring Portal V6 client could allow a local attacker to gain elevated privileges for IBM Tivoli Monitoring, caused by the default console connection not being encrypted. IBM X-Force ID: 123487. IBM Tivoli Monitoring Portal V6 permite a un atacante local escalar privilegios para IBM Tivoli Monitoring, causando que la conexión por defecto de la consola no sea encriptada. IBM X-Force ID: 123487. • http://www.ibm.com/support/docview.wss?uid=swg22003402 • CWE-319: Cleartext Transmission of Sensitive Information •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2017-1182
https://notcve.org/view.php?id=CVE-2017-1182
14 Jul 2017 — IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to execute arbitrary commands on the system, when default client-server default communications, HTTP, are being used. IBM X-Force ID: 123493. IBM Tivoli Monitoring Portal v6 permite a un atacante local o de una red adyacente ejecutar comando aleatorios en el sistema, cuando las comunicaciones por defecto entre el cliente y el servidor HTTP están siendo usadas. IBM X-Force ID: 123494. • http://www.ibm.com/support/docview.wss?uid=swg22003402 •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2017-1183
https://notcve.org/view.php?id=CVE-2017-1183
14 Jul 2017 — IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to modify SQL commands to the Portal Server, when default client-server communications, HTTP, are being used. IBM X-Force ID: 123494. IBM Tivoli Monitoring Portal v6 permite a un atacante local o de una red adyacente modificar comando SQL al Portal Server, cuando las comunicaciones por defecto entre el cliente y el servidor HTTP están siendo usadas. IBM X-Force ID: 123494. • http://www.ibm.com/support/docview.wss?uid=swg22003402 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 5.3EPSS: 0%CPEs: 26EXPL: 0CVE-2016-6083
https://notcve.org/view.php?id=CVE-2016-6083
27 Jun 2017 — IBM Tivoli Monitoring V6 could allow an unauthenticated user to access SOAP queries that could contain sensitive information. IBM X-Force ID: 117696. IBM Tivoli Monitoring V6 podría permitir a un usuario no autenticado acceder a consultas SOAP que podrían contener información confidencial. IBM X-Force ID: 117696. • http://www.ibm.com/support/docview.wss?uid=swg22000909 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.9EPSS: 0%CPEs: 23EXPL: 0CVE-2016-5933
https://notcve.org/view.php?id=CVE-2016-5933
08 Mar 2017 — IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass. IBM Reference #: 1997223. IBM Tivoli Monitoring 6.2 y 6.3 es vulnerable a posibles ataques de inyección de encabezado de host que podría conducir a envenenamiento de caché HTTP o elusión del firewall. Referencia IBM #: 1997223. • http://www.ibm.com/support/docview.wss?uid=swg21997223 • CWE-254: 7PK - Security Features •
CVSS: 7.8EPSS: 0%CPEs: 13EXPL: 0CVE-2016-2946
https://notcve.org/view.php?id=CVE-2016-2946
01 Dec 2016 — Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring (ITM) 6.2.2 before FP9, 6.2.3 before FP5, and 6.3.0 before FP2 on Linux and UNIX allows local users to gain privileges via unspecified vectors. Desbordamiento de búfer basado en pila en las ax Shared Libraries en el Agent en IBM Tivoli Monitoring (ITM) 6.2.2 en versiones anteriores a FP9, 6.2.3 en versiones anteriores a FP5 y 6.3.0 en versiones anteriores FP2 en Linux y UNIX permite a usuarios locales obtener privil... • http://www-01.ibm.com/support/docview.wss?uid=swg1IV85845 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.9EPSS: 0%CPEs: 12EXPL: 0CVE-2015-7411
https://notcve.org/view.php?id=CVE-2015-7411
12 Mar 2016 — The portal client in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 through FP6 allows remote authenticated users to gain privileges via unspecified vectors. El portal cliente en IBM Tivoli Monitoring (ITM) 6.2.2 hasta la versión FP9, 6.2.3 hasta la versión FP5 y 6.3.0 hasta la versión FP6 permite a usuarios remotos autenticados obtener privilegios a través de vectores no especificados. • http://www-01.ibm.com/support/docview.wss?uid=swg1IV77992 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 8.5EPSS: 0%CPEs: 3EXPL: 0CVE-2015-5003
https://notcve.org/view.php?id=CVE-2015-5003
03 Jan 2016 — The portal in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 before FP7 allows remote authenticated users to execute arbitrary commands by leveraging Take Action view authority and providing crafted input. El portal en IBM Tivoli Monitoring (ITM) 6.2.2 hasta la versión FP9, 6.2.3 hasta la versión FP5 y 6.3.0 en versiones anteriores a FP7 permite a usuarios remotos autenticados ejecutar comandos arbitrarios aprovechando la autoridad de la vista Take Action y proveyendo una entrad... • http://www-01.ibm.com/support/docview.wss?uid=swg1IV77742 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 8.8EPSS: 0%CPEs: 33EXPL: 0CVE-2014-6141
https://notcve.org/view.php?id=CVE-2014-6141
02 Feb 2015 — IBM Tivoli Monitoring (ITM) 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, 6.2.3 through FP05, and 6.3.0 before FP04 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands by leveraging Take Action view authority to modify in-progress commands. IBM Tivoli Monitoring (ITM) 6.2.0 hasta FP03, 6.2.1 hasta FP04, 6.2.2 hasta FP09, 6.2.3 hasta FP05, y 6.3.0 anterior a FP04 permite a usuarios remotos autenticados evadir las restricciones de acceso y ejec... • http://www-01.ibm.com/support/docview.wss?uid=swg21690932 • CWE-264: Permissions, Privileges, and Access Controls •