Tivoli Endpoint Manager vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

TE

Product

Tivoli Endpoint Manager

by Ibm · last CVE Feb 18, 2020

9

CVEs

0

On KEV

5.4

Max CVSS

0

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 0High 0Medium 1Low 0

Severity

All severities9 Critical0 High0 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Tivoli Endpoint Manager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2012-0718	5.4	1%	Feb 18	IBM Tivoli Endpoint Manager 8 does not set the HttpOnly flag on cookies Affected: 8.0
CVE-2014-6137	–	2%	Feb 16	Cross-site scripting (XSS) vulnerability in the Relay Diagnostic page in IBM Tivoli Endpoint Manager 9.1 before 9.1.1229 allows remote attackers to inject arbitrary web script or… Affected: through 9.1.1117
CVE-2014-6113	–	1%	Feb 16	Cross-site scripting (XSS) vulnerability in the Web Reports component in IBM Tivoli Endpoint Manager 9.1 before 9.1.1229 allows remote attackers to inject arbitrary web script or… Affected: through 9.1.1117
CVE-2014-3066	–	2%	Jul 2	IBM Tivoli Endpoint Manager 9.1 before 9.1.1088.0 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an… Affected: 9.1
CVE-2013-0452	–	1%	Mar 29	Cross-site request forgery (CSRF) vulnerability in the Software Use Analysis (SUA) application before 1.3.3 in IBM Tivoli Endpoint Manager 8.2 allows remote attackers to hijack… Affected: 8.2
CVE-2013-0453	–	1%	Mar 21	Cross-site scripting (XSS) vulnerability in Web Reports in IBM Tivoli Endpoint Manager (TEM) before 8.2.1372 allows remote authenticated users to inject arbitrary web script or… Affected: through 8.2; 8.0; 8.1
CVE-2012-4841	–	2%	Nov 29	Unspecified vulnerability in Tivoli Endpoint Manager for Remote Control Broker 8.2 before 8.2.1-TIV-TEMRC821-IF0002 allows remote attackers to cause a denial of service (resource… Affected: 8.2
CVE-2012-1837	–	1%	Mar 22	The (1) webreports, (2) post/create-role, and (3) post/update-role programs in IBM Tivoli Endpoint Manager (TEM) before 8.2 do not include the HTTPOnly flag in a Set-Cookie header… Affected: through 8.1; 8.0
CVE-2012-0719	–	1%	Mar 22	Cross-site scripting (XSS) vulnerability in IBM Tivoli Endpoint Manager (TEM) 8 before 8.2 patch 3 allows remote attackers to inject arbitrary web script or HTML via the… Affected: 8.0; 8.1; 8.2