IBM Installation Manager vulnerabilities

3 CVEs affecting IBM Installation Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-7442, published 2016-01-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-3518, published 2009-10-01. High severity, CVSS 9.3. EPSS: 5.5% chance of exploitation in the next 30 days. Argument injection vulnerability in the iim: URI handler in IBMIM.exe in IBM Installation Manager 1.3.2 and earlier, as used in IBM Rational Robot and Rational Team Concert, allows remote attackers…
CVE-2015-7442, published 2016-01-02. High severity, CVSS 7.0. EPSS: 0.4% chance of exploitation in the next 30 days. consoleinst.sh in IBM Installation Manager before 1.7.4.4 and 1.8.x before 1.8.4 and Packaging Utility before 1.7.4.4 and 1.8.x before 1.8.4 allows local users to gain privileges via a Trojan horse…
CVE-2014-6134, published 2015-03-25. Low severity, CVSS 1.2. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation Manager before 1.8.2 is used, retains cleartext server passwords in process memory throughout the installation…