IBM Tivoli Monitoring vulnerabilities

29 CVEs affecting IBM Tivoli Monitoring, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-3356, published 2025-10-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-1182, published 2017-07-17. High severity, CVSS 7.5. EPSS: 8.5% chance of exploitation in the next 30 days. IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to execute arbitrary commands on the system, when default client-server default communications, HTTP, are being used.…
CVE-2012-4822, published 2013-01-11. High severity, CVSS 9.3. EPSS: 6.9% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and…
CVE-2012-4821, published 2013-01-11. High severity, CVSS 9.3. EPSS: 6.9% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and…
CVE-2012-4823, published 2013-01-11. High severity, CVSS 9.3. EPSS: 6.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used…
CVE-2012-4820, published 2013-01-11. High severity, CVSS 9.3. EPSS: 5.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used…
CVE-2015-5003, published 2016-01-03. High severity, CVSS 8.5. EPSS: 3.4% chance of exploitation in the next 30 days. The portal in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 before FP7 allows remote authenticated users to execute arbitrary commands by leveraging Take Action view…
CVE-2015-7411, published 2016-03-12. Critical severity, CVSS 9.9. EPSS: 3.3% chance of exploitation in the next 30 days. The portal client in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 through FP6 allows remote authenticated users to gain privileges via unspecified vectors.
CVE-2017-1789, published 2018-03-22. Critical severity, CVSS 9.8. EPSS: 3.2% chance of exploitation in the next 30 days. IBM Tivoli Monitoring V6 6.2.3 and 6.3.0 could allow an unauthenticated user to remotely execute code through unspecified methods. IBM X-Force ID: 137034.
CVE-2017-1635, published 2017-12-13. High severity, CVSS 8.0. EPSS: 3.1% chance of exploitation in the next 30 days. IBM Tivoli Monitoring V6 6.2.2.x could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free error. A remote attacker could exploit this vulnerability to execute…
CVE-2013-2960, published 2013-06-21. Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days. Buffer overflow in KDSMAIN in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application…

Latest

CVE-2025-3356, published 2025-10-30. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing…
CVE-2025-3355, published 2025-10-30. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing…
CVE-2025-3354, published 2025-08-06. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote attacker could overflow a buffer and execute…
CVE-2025-3320, published 2025-08-06. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote attacker could overflow a buffer and execute…
CVE-2025-3357, published 2025-05-28. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 19 could allow a remote attacker to execute arbitrary code due to improper validation of an index value of a dynamically allocated array.
CVE-2020-4311, published 2020-04-23. High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Tivoli Monitoring 6.3.0 could allow a local attacker to execute arbitrary code on the system. By placing a specially crafted file, an attacker could exploit this vulnerability to load other DLL…
CVE-2019-4592, published 2020-02-13. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. IBM Tivoli Monitoring Service 6.3.0.7.3 through 6.3.0.7.10 could allow an unauthorized user to access and modify operation aspects of the ITM monitoring server possibly leading to an effective denial…
CVE-2017-1794, published 2018-09-19. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. IBM Tivoli Monitoring 6.2.3 through 6.2.3.5 and 6.3.0 through 6.3.0.7 are vulnerable to both TEPS user privilege escalation and possible denial of service due to unconstrained memory growth. IBM…