TN
Product
Tivoli Netcool/omnibus
8
CVEs
0
On KEV
5.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 3Low 1
Watch
Add Tivoli Netcool/omnibus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-4198 | 5.4 | Mar 3 | IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting Affected: 8.1.0 |
| CVE-2020-4196 | 5.4 | Mar 3 | IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting Affected: 8.1.0 |
| CVE-2020-4199 | 4.3 | Mar 18 | IBM Tivoli Netcool/OMNIbus 8.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user… Affected: 8.1.0 |
| CVE-2020-4197 | 2.4 | Mar 3 | IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 allows web pages to be stored locally which can be read by another user on the system Affected: 8.1.0 |
| CVE-2014-3032 | – | Jan 17 | Cross-site scripting (XSS) vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus 7.3.0 before 7.3.0.6, 7.3.1 before 7.3.1.7, and 7.4.0 before 7.4.0.3 allows remote… Affected: 7.3.0; 7.3.0.1; 7.3.0.2; 7.3.0.3; 7.3.0.4; 7.3.0.5; +10 more |
| CVE-2014-0942 | – | May 1 | Cross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject… Affected: 7.4.0 |
| CVE-2014-0941 | – | May 1 | Cross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject… Affected: 7.4.0 |
| CVE-2011-1343 | – | Mar 9 | SQL injection vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus before 7.3.0.4 allows remote attackers to execute arbitrary SQL commands via "dynamic SQL parameters." Affected: through 7.2.1.10; 7.1.0.0; 7.1.0.11; 7.1.0.12; 7.1.0.13; 7.2.0.0; +14 more |
Showing 8