Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm tivoli storage manager 7.1.4 vulnerabilities and exploits

(subscribe to this query)
4.4
CVSSv2
CVE-2016-6043
Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to session expiration not being enforced.
Ibm Tivoli Storage Manager 6.4.2.2Ibm Tivoli Storage Manager 6.4.2Ibm Tivoli Storage Manager 7.1.3Ibm Tivoli Storage Manager 7.1.3.2Ibm Tivoli Storage Manager 6.4.2.4Ibm Tivoli Storage Manager 6.4.2.3Ibm Tivoli Storage Manager 7.1.1.1Ibm Tivoli Storage Manager 7.1.0.1Ibm Tivoli Storage Manager 7.1.0.2Ibm Tivoli Storage Manager 7.1Ibm Tivoli Storage Manager 6.4.1Ibm Tivoli Storage Manager 7.1.7Ibm Tivoli Storage Manager 7.1.4.2Ibm Tivoli Storage Manager 7.1.4.1Ibm Tivoli Storage Manager 6.4.2.1Ibm Tivoli Storage Manager 6.4.1.1Ibm Tivoli Storage Manager 7.1.4Ibm Tivoli Storage Manager 7.1.3.1Ibm Tivoli Storage Manager 7.1.1.2
4
CVSSv2
CVE-2016-6044
IBM Tivoli Storage Manager Operations Center could allow an authenticated malicious user to enable or disable the application's REST API, which may let the attacker violate security policy.
Ibm Tivoli Storage Manager 6.4.2.3Ibm Tivoli Storage Manager 7.1.4.2Ibm Tivoli Storage Manager 7.1.4Ibm Tivoli Storage Manager 7.1.0.2Ibm Tivoli Storage Manager 6.4.2.1Ibm Tivoli Storage Manager 6.4.2Ibm Tivoli Storage Manager 6.4.1.1Ibm Tivoli Storage Manager 6.4.1Ibm Tivoli Storage Manager 7.1.7Ibm Tivoli Storage Manager 7.1.3.1Ibm Tivoli Storage Manager 7.1.3.2Ibm Tivoli Storage Manager 7.1.1.2Ibm Tivoli Storage Manager 7.1.1.1Ibm Tivoli Storage Manager 6.4.2.4Ibm Tivoli Storage Manager 6.4.2.2Ibm Tivoli Storage Manager 7.1.4.1Ibm Tivoli Storage Manager 7.1.3Ibm Tivoli Storage Manager 7.1.0.1Ibm Tivoli Storage Manager 7.1
6.8
CVSSv2
CVE-2016-6045
IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site request forgery which could allow an malicious user to execute malicious and unauthorized actions transmitted from a user that the website trusts.
Ibm Tivoli Storage Manager 6.4.2.3Ibm Tivoli Storage Manager 6.4.2.2Ibm Tivoli Storage Manager 6.4.2.1Ibm Tivoli Storage Manager 6.4.2Ibm Tivoli Storage Manager 7.1Ibm Tivoli Storage Manager 6.4.1Ibm Tivoli Storage Manager 7.1.4.2Ibm Tivoli Storage Manager 7.1.3.2Ibm Tivoli Storage Manager 7.1.1.1Ibm Tivoli Storage Manager 7.1.0.2Ibm Tivoli Storage Manager 7.1.4.1Ibm Tivoli Storage Manager 7.1.4Ibm Tivoli Storage Manager 7.1.3Ibm Tivoli Storage Manager 7.1.3.1Ibm Tivoli Storage Manager 6.4.2.4Ibm Tivoli Storage Manager 6.4.1.1Ibm Tivoli Storage Manager 7.1.7Ibm Tivoli Storage Manager 7.1.1.2Ibm Tivoli Storage Manager 7.1.0.1
3.5
CVSSv2
CVE-2016-6046
IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Ibm Tivoli Storage Manager 6.4.2.4Ibm Tivoli Storage Manager 6.4.2.3Ibm Tivoli Storage Manager 7.1.1.2Ibm Tivoli Storage Manager 7.1.1.1Ibm Tivoli Storage Manager 7.1.0.1Ibm Tivoli Storage Manager 7.1.0.2Ibm Tivoli Storage Manager 6.4.2.2Ibm Tivoli Storage Manager 6.4.2Ibm Tivoli Storage Manager 7.1.3Ibm Tivoli Storage Manager 7.1.3.2Ibm Tivoli Storage Manager 7.1Ibm Tivoli Storage Manager 6.4.1Ibm Tivoli Storage Manager 7.1.7Ibm Tivoli Storage Manager 7.1.4.2Ibm Tivoli Storage Manager 7.1.4.1Ibm Tivoli Storage Manager 6.4.2.1Ibm Tivoli Storage Manager 6.4.1.1Ibm Tivoli Storage Manager 7.1.4Ibm Tivoli Storage Manager 7.1.3.1
6
CVSSv2
CVE-2016-8998
IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buffer overflow using a specially crafted SQL query and execute arbitrary code on the server. IBM Reference #: 1998747.
Ibm Tivoli Storage Manager 7.1.3Ibm Tivoli Storage Manager 7.1.3.000Ibm Tivoli Storage Manager 7.1.5Ibm Tivoli Storage Manager 7.1.5.200Ibm Tivoli Storage Manager 7.1.1.100Ibm Tivoli Storage Manager 7.1.1.300Ibm Tivoli Storage Manager 7.1.4.1Ibm Tivoli Storage Manager 7.1.4.2Ibm Tivoli Storage Manager 7.1.1.2Ibm Tivoli Storage Manager 7.1.1.200Ibm Tivoli Storage Manager 7.1.3.2Ibm Tivoli Storage Manager 7.1.4Ibm Tivoli Storage Manager 7.1.1Ibm Tivoli Storage Manager 7.1.1.1Ibm Tivoli Storage Manager 7.1.3.1Ibm Tivoli Storage Manager 7.1.3.100Ibm Tivoli Storage Manager 7.1.7
2.1
CVSSv2
CVE-2016-8916
IBM Tivoli Storage Manager 5.5, 6.1-6.4, and 7.1 stores password information in a log file that could be read by a local user when a set password command is issued. IBM X-Force ID: 118472.
Ibm Tivoli Storage Manager 6.4.1.0Ibm Tivoli Storage Manager 6.4.2.500Ibm Tivoli Storage Manager 6.4.3Ibm Tivoli Storage Manager 7.1.0.1Ibm Tivoli Storage Manager 7.1.0.3Ibm Tivoli Storage Manager 7.1.3Ibm Tivoli Storage Manager 7.1.3.1Ibm Tivoli Storage Manager 7.1.4.2Ibm Tivoli Storage Manager 7.1.5.200Ibm Tivoli Storage Manager 7.1.6.2Ibm Tivoli Storage Manager 7.1.6.3Ibm Tivoli Storage Manager 7.1.6.4Ibm Tivoli Storage Manager 7.1Ibm Tivoli Storage Manager 7.1.3.2Ibm Tivoli Storage Manager 7.1.3.100Ibm Tivoli Storage Manager 7.1.4Ibm Tivoli Storage Manager 7.1.4.1Ibm Tivoli Storage Manager 6.4.1Ibm Tivoli Storage Manager 6.4.2Ibm Tivoli Storage Manager 6.4.2.100Ibm Tivoli Storage Manager 6.4.2.200Ibm Tivoli Storage Manager 7.1.1.1
2.1
CVSSv2
CVE-2017-1378
IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. IBM X-Force ID: 126875.
Ibm Tivoli Storage Manager 8.1.0.2Ibm Tivoli Storage Manager 7.1.6.5Ibm Tivoli Storage Manager 6.1Ibm Tivoli Storage Manager 6.1.0Ibm Tivoli Storage Manager 6.1.1Ibm Tivoli Storage Manager 6.3.0.5Ibm Tivoli Storage Manager 6.3.0.15Ibm Tivoli Storage Manager 6.3.0.17Ibm Tivoli Storage Manager 6.3.1Ibm Tivoli Storage Manager 6.4.2.200Ibm Tivoli Storage Manager 6.4.2.500Ibm Tivoli Storage Manager 6.4.2.600Ibm Tivoli Storage Manager 6.4.3Ibm Tivoli Storage Manager 6.4.3.1Ibm Tivoli Storage Manager 7.1.3.000Ibm Tivoli Storage Manager 7.1.3.1Ibm Tivoli Storage Manager 7.1.3.2Ibm Tivoli Storage Manager 7.1.3.100Ibm Tivoli Storage Manager 6.1.5.4Ibm Tivoli Storage Manager 6.1.5.5Ibm Tivoli Storage Manager 6.1.5.6Ibm Tivoli Storage Manager 6.2.0
3.6
CVSSv2
CVE-2017-1301
IBM Spectrum Protect 7.1 and 8.1 could allow a local malicious user to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates temporary files insecurely. A local attacker could exploit this vulnerability by creating a symbolic link from a temporary file to va...
Ibm Tivoli Storage Manager 6.1.0Ibm Tivoli Storage Manager 6.1.1Ibm Tivoli Storage Manager 6.1.2Ibm Tivoli Storage Manager 6.1.3Ibm Tivoli Storage Manager 6.1.4Ibm Tivoli Storage Manager 6.3.0.17Ibm Tivoli Storage Manager 6.3.1Ibm Tivoli Storage Manager 6.3.1.2Ibm Tivoli Storage Manager 6.3.2.2Ibm Tivoli Storage Manager 6.4.3Ibm Tivoli Storage Manager 6.4.3.1Ibm Tivoli Storage Manager 7.1Ibm Tivoli Storage Manager 7.1..5.100Ibm Tivoli Storage Manager 7.1.3.100Ibm Tivoli Storage Manager 7.1.4Ibm Tivoli Storage Manager 7.1.4.1Ibm Tivoli Storage Manager 7.1.4.2Ibm Tivoli Storage Manager 7.1.6.6Ibm Tivoli Storage Manager 6.1.5Ibm Tivoli Storage Manager 6.1.5.5Ibm Tivoli Storage Manager 6.3Ibm Tivoli Storage Manager 6.3.0.15
4
CVSSv2
CVE-2016-8940
IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, an attacker is able to submit SQL queries that access database tables that are not intended for access or use by administrators. Th...
Ibm Tivoli Storage Manager 7.1Ibm Tivoli Storage Manager 7.1.0.1Ibm Tivoli Storage Manager 7.1.1.200Ibm Tivoli Storage Manager 7.1.3Ibm Tivoli Storage Manager 7.1.4Ibm Tivoli Storage Manager 7.1.4.2Ibm Tivoli Storage Manager 6.3.0.5Ibm Tivoli Storage Manager 6.3.1.2Ibm Tivoli Storage Manager 6.1.4Ibm Tivoli Storage Manager 6.1.5.4Ibm Tivoli Storage Manager 6.2.2Ibm Tivoli Storage Manager 6.2.3Ibm Tivoli Storage Manager 7.1.0.3Ibm Tivoli Storage Manager 7.1.1Ibm Tivoli Storage Manager 7.1.1.1Ibm Tivoli Storage Manager 7.1.1.100Ibm Tivoli Storage Manager 7.1.5.200Ibm Tivoli Storage Manager 7.1.7Ibm Tivoli Storage Manager 6.3Ibm Tivoli Storage Manager 6.3.0.15Ibm Tivoli Storage Manager 6.1.5.5Ibm Tivoli Storage Manager 6.1.5.6
2.1
CVSSv2
CVE-2016-2894
IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 up to and including 6.3 prior to 6.3.2.6, 6.4 prior to 6.4.3.3, and 7.1 prior to 7.1.6 allows local users to obtain sensitive retrieved data from arbitrary accounts in opportunistic circumstances by leveraging previous us...
Ibm Tivoli Storage Manager 6.3.0.17Ibm Tivoli Storage Manager 6.3.0.15Ibm Tivoli Storage Manager 6.2.1Ibm Tivoli Storage Manager 6.2.0Ibm Tivoli Storage Manager 6.1.2Ibm Tivoli Storage Manager 6.1.1Ibm Tivoli Storage Manager 5.5.3Ibm Tivoli Storage Manager 5.5.2Ibm Tivoli Storage Manager 6.3.1Ibm Tivoli Storage Manager 6.3.0.5Ibm Tivoli Storage Manager 6.2.3Ibm Tivoli Storage Manager 6.2.2Ibm Tivoli Storage Manager 6.1.5Ibm Tivoli Storage Manager 6.1.4Ibm Tivoli Storage Manager 6.1.3Ibm Tivoli Storage Manager 5.5.4.1Ibm Tivoli Storage Manager 5.5.4Ibm Tivoli Storage Manager 6.3.0Ibm Tivoli Storage Manager 6.3Ibm Tivoli Storage Manager 6.2Ibm Tivoli Storage Manager 6.1.5.6Ibm Tivoli Storage Manager 6.1.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook