TS
Product
Tivoli Storage Manager
49
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 8Medium 10Low 2
Watch
Add Tivoli Storage Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-8940 | 8.8 | Mar 7 | IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries Affected: 6.1; 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; +34 more |
| CVE-2016-6045 | 8.8 | Feb 1 | IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted… Affected: 6.4.1; 6.4.1.1; 6.4.2; 6.4.2.1; 6.4.2.2; 6.4.2.3; +13 more |
| CVE-2017-1378 | 7.8 | Oct 5 | IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be… Affected: 6.1; 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; +34 more |
| CVE-2016-5985 | 7.8 | Feb 1 | The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled Affected: through 7.1.6.2; 7.1.0.0; through 6.4.3.3; 6.4.0.0; through 6.3.2.5; 6.3.0.0; +3 more |
| CVE-2018-1786 | 7.5 | Nov 12 | IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WAIT state Affected: 7.1 through 7.1.8.3 |
| CVE-2016-8998 | 7.2 | Feb 24 | IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buffer overflow using a specially crafted SQL query and… Affected: 7.1.1; 7.1.1.1; 7.1.1.2; 7.1.1.100; 7.1.1.200; 7.1.1.300; +11 more |
| CVE-2020-28198 | 7.0 | May 6 | The 'id' parameter of IBM Tivoli Storage Manager Version 5 Release 2 (Command Line Administrative Interface, dsmadmc.exe) is vulnerable to an exploitable stack buffer overflow Affected: 5.2.0.1 |
| CVE-2016-6043 | 7.0 | Feb 1 | Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to session expiration not being enforced Affected: 6.4.1; 6.4.1.1; 6.4.2; 6.4.2.1; 6.4.2.2; 6.4.2.3; +13 more |
Showing 8