IBM Tivoli Change And Configuration Management Database vulnerabilities

7 CVEs affecting IBM Tivoli Change And Configuration Management Database, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-6072, published 2017-02-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-1394, published 2012-03-13. Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days. IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service…
CVE-2012-0195, published 2012-03-13. Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Start Center Layout and Configuration component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset…
CVE-2011-4816, published 2012-03-13. Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days. SQL injection vulnerability in the KPI component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli…
CVE-2011-4817, published 2012-03-13. Medium severity, CVSS 4.0. EPSS: 1.2% chance of exploitation in the next 30 days. The About option on the Help menu in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request…
CVE-2012-0715, published 2012-03-02. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Gantt applet viewer in IBM Tivoli Change and Configuration Management Database (CCMDB) 7.2.1 and IBM ILOG JViews Gantt allows remote attackers to…
CVE-2011-1397, published 2012-03-13. Medium severity, CVSS 6.8. EPSS: 1% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in the Labor Reporting page in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2,…
CVE-2016-6072, published 2017-02-01. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality…