IBM Tivoli Identity Manager vulnerabilities

9 CVEs affecting IBM Tivoli Identity Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-6112, published 2018-04-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-6112, published 2018-04-20. Medium severity, CVSS 5.9. EPSS: 1.8% chance of exploitation in the next 30 days. IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS-SIM-IF0001 and 7.0.x before 7.0.0.0-ISS-SIM-IF0003 make it easier for remote…
CVE-2009-2316, published 2009-07-05. Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0 allow remote attackers to inject arbitrary web script or HTML by entering an unspecified URL in (1) the…
CVE-2009-2583, published 2009-07-23. Medium severity, CVSS 6.8. EPSS: 1.4% chance of exploitation in the next 30 days. Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0.0.6 allow remote attackers to hijack web sessions via unspecified vectors involving the (1) console and (2) self…
CVE-2014-6108, published 2018-04-20. Medium severity, CVSS 5.9. EPSS: 1.2% chance of exploitation in the next 30 days. IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS-SIM-IF0001 and 7.0.x before 7.0.0.0-ISS-SIM-IF0003 might allow…
CVE-2014-6109, published 2018-04-20. Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days. IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS-SIM-IF0001 and 7.0.x before 7.0.0.0-ISS-SIM-IF0003 allow remote authenticated…
CVE-2009-3262, published 2009-09-18. Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Self Service UI (SSUI) in IBM Tivoli Identity Manager (ITIM) 5.0.0.5 allows remote authenticated users to inject arbitrary web script or HTML via the…
CVE-2014-0961, published 2014-06-08. Medium severity, CVSS 6.0. EPSS: 0.5% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in IBM Tivoli Identity Manager (ITIM) 5.0 before 5.0.0.15 and 5.1 before 5.1.0.15 and IBM Security Identity Manager (ISIM) 6.0 before 6.0.0.2 allows…
CVE-2006-6607, published 2006-12-18. Low severity, CVSS 2.7. EPSS: 0.5% chance of exploitation in the next 30 days. The Java Key Store (JKS) for WebSphere Application Server (WAS) for IBM Tivoli Identity Manager (ITIM) 4.6 places the JKS password in a -Djavax.net.ssl.trustStorePassword command line argument, which…
CVE-2014-6111, published 2018-04-20. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS-SIM-IF0001 and 7.0.x before 7.0.0.0-ISS-SIM-IF0003 store encrypted user…