TS
Product
Tivoli Storage Productivity Center
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 6Low 1
Watch
Add Tivoli Storage Productivity Center to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-4071 | 8.8 | May 9 | IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) could allow a remote attacker to execute arbitrary commands on the system,… Affected: 5.2.0 through 5.2.7.1 |
| CVE-2016-8941 | 8.8 | Feb 1 | IBM Tivoli Storage Productivity Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a… Affected: 5.2.0; 5.2.0.0; 5.2.1.0; 5.2.1.1; 5.2.2.0; 5.2.3.0; +7 more |
| CVE-2016-5946 | 6.5 | Sep 26 | Directory traversal vulnerability in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to read arbitrary… Affected: 5.2.0; 5.2.1; 5.2.1.1; 5.2.2; 5.2.3; 5.2.4; +6 more |
| CVE-2019-4072 | 6.3 | May 9 | IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) allows users to remain idle within the application even when a user has logged… Affected: 5.2.0 through 5.2.7.1 |
| CVE-2016-5947 | 5.7 | Sep 26 | IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to conduct clickjacking attacks via a crafted web site Affected: 5.2.0; 5.2.1; 5.2.1.1; 5.2.2; 5.2.3; 5.2.4; +6 more |
| CVE-2016-8943 | 5.4 | Feb 1 | IBM Tivoli Storage Productivity Center is vulnerable to cross-site scripting Affected: 5.2.0; 5.2.0.0; 5.2.1.0; 5.2.1.1; 5.2.2.0; 5.2.3.0; +8 more |
| CVE-2016-5944 | 5.4 | Sep 26 | Cross-site scripting (XSS) vulnerability in the Web UI in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users… Affected: 5.2.0; 5.2.1; 5.2.1.1; 5.2.2; 5.2.3; 5.2.4; +6 more |
| CVE-2016-5945 | 4.3 | Sep 26 | IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to upload non-executable files via a crafted HTTP request Affected: 5.2.0; 5.2.1; 5.2.1.1; 5.2.2; 5.2.3; 5.2.4; +6 more |
| CVE-2016-8942 | 3.1 | Feb 1 | IBM Tivoli Storage Productivity Center could allow an authenticated user with intimate knowledge of the system to edit a limited set of properties on the server Affected: 5.2.0; 5.2.0.0; 5.2.1.0; 5.2.1.1; 5.2.2.0; 5.2.3.0; +8 more |
Showing 9