IBM Systems Director vulnerabilities

3 CVEs affecting IBM Systems Director, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-1992, published 2015-08-23.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-2163, published 2011-05-20. High severity, CVSS 9.3. EPSS: 1.7% chance of exploitation in the next 30 days. Unspecified vulnerability in Virtualization Manager 1.2.2 in IBM Systems Director 1.2.2 has unknown impact and attack vectors.
• CVE-2015-1992, published 2015-08-23. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Systems Director 5.2.x, 6.1.x, 6.2.0.x, 6.2.1.x, 6.3.0.0, 6.3.1.x, 6.3.2.x, 6.3.3.x, 6.3.5.0, and 6.3.6.0 improperly processes events, which allows local users to gain privileges via unspecified…
• CVE-2014-3099, published 2014-12-06. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Security component in IBM Systems Director 6.3.0 through 6.3.5 allows local users to obtain sensitive information via unknown vectors.