IBM Tivoli Common Reporting vulnerabilities

5 CVEs affecting IBM Tivoli Common Reporting, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-7450, published 2016-01-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-7450: IBM WebSphere Application Server and Server Hypervisor Edition Code Injection., published 2016-01-02. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-01-10. EPSS: 97.8% chance of exploitation in the next 30 days. Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a…
CVE-2011-0732, published 2011-02-01. High severity, CVSS 10.0. EPSS: 1.6% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in IBM Tivoli Integrated Portal (TIP) 1.1.1.1, as used in IBM Tivoli Common Reporting (TCR) 1.2.0 before Interim Fix 9, have unknown impact and attack vectors,…
CVE-2015-1969, published 2015-10-04. Low severity, CVSS 3.5. EPSS: 1.5% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Tivoli Common Reporting (TCR) 2.1 before IF13 and 2.1.1 before IF21, and TCR 3.1.x as used in Cognos Business Intelligence before 10.2 IF0015 and other…
CVE-2015-7436, published 2016-01-02. Low severity, CVSS 2.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos…
CVE-2015-7435, published 2016-01-02. Low severity, CVSS 2.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos…