ibm tivoli application dependency discovery manager vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 up to and including 7.3.0.10 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an malicious user to conduct various attacks against the vulnerable system...

Ibm Tivoli Application Dependency Discovery Manager

8.8

CVSSv3

IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 up to and including 7.3.0.10 could allow an attacker on the organization's local network to escalate their privileges due to unauthorized API access. IBM X-Force ID: 270267.

Ibm Tivoli Application Dependency Discovery Manager

8.8

CVSSv3

IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site request forgery which could allow an malicious user to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 11029.

Ibm Tivoli Application Dependency Discovery Manager 7.3.0 Ibm Tivoli Application Dependency Discovery Manager 7.2.2

8.1

CVSSv3

IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2 and 7.2.0 up to and including 7.2.1.4 might allow remote malicious users to obtain sensitive information about Tomcat credentials by sniffing the network for a session in which HTTP is used. IBM X-Force ID: 84361.

Ibm Tivoli Application Dependency Discovery Manager Ibm Tivoli Application Dependency Discovery Manager 7.1.2

7.5

CVSSv3

IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could expose password hashes in stored in system memory on target systems that are configured to use TADDM. IBM X-Force ID: 145110.

Ibm Tivoli Application Dependency Discovery Manager

7.5

CVSSv3

IBM Tivoli Application Dependency Discovery Manager (TADDM) prior to 7.2.1.5 and 7.2.x prior to 7.2.2 make it easier for remote malicious users to defeat cryptographic protection mechanisms by leveraging support for weak SSL ciphers. IBM X-Force ID: 84353.

Ibm Tivoli Application Dependency Discovery Manager Ibm Tivoli Application Dependency Discovery Manager 7.1.2

6.5

CVSSv3

IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could allow a remote malicious user to include arbitrary files which could allow the malicious user to read any file on the system. IBM X-Force ID: 118538.

Ibm Tivoli Application Dependency Discovery Manager 7.2.2.0 Ibm Tivoli Application Dependency Discovery Manager 7.2.2.2 Ibm Tivoli Application Dependency Discovery Manager 7.2.2.4 Ibm Tivoli Application Dependency Discovery Manager 7.2.2.5 Ibm Tivoli Application Dependency Discovery Manager 7.2.2 Ibm Tivoli Application Dependency Discovery Manager 7.3.0.3 Ibm Tivoli Application Dependency Discovery Manager 7.3.0.2 Ibm Tivoli Application Dependency Discovery Manager 7.3.0.1 Ibm Tivoli Application Dependency Discovery Manager 7.3.0.0 Ibm Tivoli Application Dependency Discovery Manager 7.3.0 Ibm Tivoli Application Dependency Discovery Manager 7.2.2.1 Ibm Tivoli Application Dependency Discovery Manager 7.2.2.3

6.1

CVSSv3

IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 up to and including 7.3.0.10 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credent...

Ibm Tivoli Application Dependency Discovery Manager

5.5

CVSSv3

IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2.x prior to 7.2.1.5 and 7.2.x prior to 7.2.2.0 on Unix use weak permissions (755) for unspecified configuration and log files, which allows local users to obtain sensitive information by reading the files. IBM X-For...

Ibm Tivoli Application Dependency Discovery Manager Ibm Tivoli Application Dependency Discovery Manager 7.1.2

5.4

CVSSv3

IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within ...

Ibm Tivoli Application Dependency Discovery Manager 7.3.0.3 Ibm Tivoli Application Dependency Discovery Manager 7.2.2.2 Ibm Tivoli Application Dependency Discovery Manager 7.2.2.4 Ibm Tivoli Application Dependency Discovery Manager 7.2.2.5 Ibm Tivoli Application Dependency Discovery Manager 7.2.2 Ibm Tivoli Application Dependency Discovery Manager 7.3.0.1 Ibm Tivoli Application Dependency Discovery Manager 7.3.0.0 Ibm Tivoli Application Dependency Discovery Manager 7.3.0 Ibm Tivoli Application Dependency Discovery Manager 7.2.2.0 Ibm Tivoli Application Dependency Discovery Manager 7.3.0.2 Ibm Tivoli Application Dependency Discovery Manager 7.2.2.1 Ibm Tivoli Application Dependency Discovery Manager 7.2.2.3

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook