TS
Product
Tivoli Storage Manager
49
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 8Medium 10Low 2
Watch
Add Tivoli Storage Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-6110 | 6.5 | Feb 1 | IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local user Affected: through 7.1.6.3; 7.1.0.0 |
| CVE-2018-1550 | 5.5 | Sep 26 | IBM Spectrum Protect 7.1 and 8.1 could allow a local user to corrupt or delete highly sensitive information that would cause a denial of service to other users Affected: 7.1.8.0 through 7.1.8.2; 8.1.2 through 8.1.4 |
| CVE-2017-1301 | 5.5 | Oct 5 | IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack Affected: 6.1; 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; +34 more |
| CVE-2016-8939 | 5.5 | Jun 7 | IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) clients/agents store password information in the Windows Registry in a manner which can be compromised Affected: 6.1; 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; +34 more |
| CVE-2016-8916 | 5.5 | May 5 | IBM Tivoli Storage Manager 5.5, 6.1-6.4, and 7.1 stores password information in a log file that could be read by a local user when a set password command is issued Affected: through 6.3; 6.4.0.0; 6.4.1; 6.4.1.0; 6.4.2; 6.4.2.100; +30 more |
| CVE-2016-0371 | 5.5 | Feb 1 | The Tivoli Storage Manager (TSM) password may be displayed in plain text via application trace output while application tracing is enabled Affected: 7.1.0.0 through 7.1.6.2; 6.4.0.0 through 6.4.3.3; 5.5 through 6.3.2.5 |
| CVE-2016-6046 | 5.4 | Feb 1 | IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site scripting Affected: 6.4.1; 6.4.1.1; 6.4.2; 6.4.2.1; 6.4.2.2; 6.4.2.3; +13 more |
| CVE-2015-4951 | 5.3 | Jan 20 | Client Acceptor Daemon (CAD) in the client in IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 and 6.x before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.3 allows… Affected: 5.5; 6.1; 6.2; 6.3; 6.4; 7.1 |
| CVE-2017-1339 | 4.4 | Oct 5 | IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password Affected: 6.1; 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; +34 more |
| CVE-2016-6044 | 4.3 | Feb 1 | IBM Tivoli Storage Manager Operations Center could allow an authenticated attacker to enable or disable the application's REST API, which may let the attacker violate security… Affected: 6.4.1; 6.4.1.1; 6.4.2; 6.4.2.1; 6.4.2.2; 6.4.2.3; +13 more |
Showing 10