9.8

CVE-2025-3320

Medienbericht

IBM Tivoli Monitoring code execution

IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Tivoli Monitoring Version 6.3.0.7 Update -
Ibm ≫ Tivoli Monitoring Version 6.3.0.7 Update sp1
Ibm ≫ Tivoli Monitoring Version 6.3.0.7 Update sp10
Ibm ≫ Tivoli Monitoring Version 6.3.0.7 Update sp11
Ibm ≫ Tivoli Monitoring Version 6.3.0.7 Update sp12
Ibm ≫ Tivoli Monitoring Version 6.3.0.7 Update sp13
Ibm ≫ Tivoli Monitoring Version 6.3.0.7 Update sp14
Ibm ≫ Tivoli Monitoring Version 6.3.0.7 Update sp15
Ibm ≫ Tivoli Monitoring Version 6.3.0.7 Update sp16
Ibm ≫ Tivoli Monitoring Version 6.3.0.7 Update sp17
Ibm ≫ Tivoli Monitoring Version 6.3.0.7 Update sp18
Ibm ≫ Tivoli Monitoring Version 6.3.0.7 Update sp19
Ibm ≫ Tivoli Monitoring Version 6.3.0.7 Update sp2
Ibm ≫ Tivoli Monitoring Version 6.3.0.7 Update sp20
Ibm ≫ Tivoli Monitoring Version 6.3.0.7 Update sp3
Ibm ≫ Tivoli Monitoring Version 6.3.0.7 Update sp4
Ibm ≫ Tivoli Monitoring Version 6.3.0.7 Update sp5
Ibm ≫ Tivoli Monitoring Version 6.3.0.7 Update sp6
Ibm ≫ Tivoli Monitoring Version 6.3.0.7 Update sp7
Ibm ≫ Tivoli Monitoring Version 6.3.0.7 Update sp8
Ibm ≫ Tivoli Monitoring Version 6.3.0.7 Update sp9
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.49% 0.383
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
IBM 8.1 2.2 5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
09.08.2025 11:36
https://www.ibm.com/support/pages/node/7241472
Vendor Advisory