Ibm

Tivoli Business Service Manager

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.3

CVE-2020-4344

  • EPSS 0.05%
  • Veröffentlicht 15.09.2020 14:15:14
  • Zuletzt bearbeitet 21.11.2024 05:32:36

IBM Tivoli Business Service Manager 6.2.0.0 - 6.2.0.2 IF 1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 178247.

8.8

CVE-2016-0286

  • EPSS 0.28%
  • Veröffentlicht 09.03.2018 19:29:00
  • Zuletzt bearbeitet 21.11.2024 02:41:25

IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP0004 allows remote authenticated users to obtain administrator passwords by leveraging unspecified privileges. BM X-Force ID: 111234.

5.4

CVE-2016-0311

  • EPSS 0.18%
  • Veröffentlicht 02.02.2018 21:29:00
  • Zuletzt bearbeitet 21.11.2024 02:41:28

Cross-site scripting (XSS) vulnerability in IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP0004 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Forc...

3.5

CVE-2014-3031

  • EPSS 0.17%
  • Veröffentlicht 12.08.2014 00:55:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in IBM Tivoli Business Service Manager 4.2.0 before 4.2.0.0 IF12 and 4.2.1 before 4.2.1.3 IF9 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

2.1

CVE-2008-0441

Exploit
  • EPSS 0.06%
  • Veröffentlicht 25.01.2008 00:00:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

IBM Tivoli Business Service Manager (TBSM) 4.1.1 stores passwords in cleartext (1) after external authentication, which triggers writing the password to SM_server.log; and (2) after a reconfig action; which allows local users to obtain sensitive info...

4.9

CVE-2007-1940

  • EPSS 0.07%
  • Veröffentlicht 11.04.2007 01:19:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

IBM Tivoli Business Service Manager (TBSM) 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain sensitive information by reading (1) ncisetup.db or (2) msi.log.