IBM Tivoli Netcool/impact vulnerabilities

13 CVEs affecting IBM Tivoli Netcool/impact, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-4788, published 2026-04-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-4239, published 2020-03-31. Medium severity, CVSS 5.3. EPSS: 1.8% chance of exploitation in the next 30 days. IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information…
CVE-2019-4103, published 2019-06-17. High severity, CVSS 8.0. EPSS: 1.4% chance of exploitation in the next 30 days. IBM Tivoli Netcool/Impact 7.1.0 allows for remote execution of command by low privileged User. Remote code execution allow to execute arbitrary code on system which lead to take control over the…
CVE-2020-4236, published 2020-03-31. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow an authenticated user to cause a denial of service due to improper content parsing in the project management module. IBM X-Force ID:…
CVE-2019-4570, published 2019-11-22. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. IBM Tivoli Netcool Impact 7.1.0 through 7.1.0.16 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 166720.
CVE-2014-6161, published 2014-11-08. Low severity, CVSS 3.5. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Tivoli Netcool/Impact 6.1.1 before 6.1.1.1-TIV-NCI-IF0001 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
CVE-2020-4849, published 2020-12-15. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.19 Interim Fix 7 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this…
CVE-2019-4681, published 2020-03-24. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…
CVE-2021-29794, published 2021-07-12. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. IBM Tivoli Netcool/Impact 7.1.0.20 and 7.1.0.21 uses an insecure SSH server configuration which enables weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
CVE-2020-4235, published 2020-03-31. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…
CVE-2019-4569, published 2019-11-22. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.16 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…

Latest

CVE-2026-4788, published 2026-04-08. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.37 stores sensitive information in log files that could be read by a local user.
CVE-2020-4238, published 2020-03-31. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that…
CVE-2020-4237, published 2020-03-31. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that…