IBM Tivoli Application Dependency Discovery Manager vulnerabilities

22 CVEs affecting IBM Tivoli Application Dependency Discovery Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-23227, published 2025-01-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-4002, published 2013-07-23. High severity, CVSS 7.1. EPSS: 24.7% chance of exploitation in the next 30 days. XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7…
CVE-2013-3017, published 2018-07-09. High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days. IBM Tivoli Application Dependency Discovery Manager (TADDM) before 7.2.1.5 and 7.2.x before 7.2.2 make it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging…
CVE-2013-3018, published 2018-05-24. Medium severity, CVSS 5.3. EPSS: 2% chance of exploitation in the next 30 days. The AXIS webapp in deploy-tomcat/axis in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2 and 7.2.0 through 7.2.1.4 allows remote attackers to obtain sensitive configuration…
CVE-2013-3023, published 2018-05-24. High severity, CVSS 8.1. EPSS: 1.9% chance of exploitation in the next 30 days. IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2 and 7.2.0 through 7.2.1.4 might allow remote attackers to obtain sensitive information about Tomcat credentials by sniffing the…
CVE-2013-3004, published 2014-07-01. Low severity, CVSS 3.5. EPSS: 1.9% chance of exploitation in the next 30 days. Directory traversal vulnerability in BIRT-Report Viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.x and 7.2.x before 7.2.1.5 allows remote authenticated users to read…
CVE-2014-6149, published 2014-10-29. Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days. Directory traversal vulnerability in BIRT-viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.0.0 through 7.2.0.10, 7.2.1.0 through 7.2.1.6, and 7.2.2.0 through 7.2.2.2 allows…
CVE-2018-1675, published 2019-02-04. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could expose password hashes in stored in system memory on target systems that are configured to use TADDM. IBM X-Force ID: 145110.
CVE-2016-8925, published 2017-04-14. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could allow a remote attacker to include arbitrary files which could allow the attacker to read any file on the system. IBM X-Force…
CVE-2013-2974, published 2014-01-29. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. The BIRT viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.1.x before 7.2.1.5 allows remote authenticated users to bypass authorization checks and obtain report-administration…
CVE-2014-6148, published 2014-10-31. Low severity, CVSS 3.5. EPSS: 1% chance of exploitation in the next 30 days. IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.0.0 through 7.2.0.10, 7.2.1.0 through 7.2.1.6, and 7.2.2.0 through 7.2.2.2 does not require TADDM authentication for rptdesign…

Latest

CVE-2025-23227, published 2025-01-23. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.11 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript…
CVE-2023-47142, published 2024-02-02. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 could allow an attacker on the organization's local network to escalate their privileges due to unauthorized API access. …
CVE-2023-47144, published 2024-02-02. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
CVE-2023-47143, published 2024-02-02. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an…
CVE-2018-1455, published 2018-08-15. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted…
CVE-2013-4040, published 2018-05-01. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2.x before 7.2.1.5 and 7.2.x before 7.2.2.0 on Unix use weak permissions (755) for unspecified configuration and log files, which…