IBM Tivoli Netcool Security Manager vulnerabilities

2 CVEs affecting IBM Tivoli Netcool Security Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-6363, published 2007-12-15.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2007-6219, published 2007-12-04. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Tivoli Netcool Security Manager 1.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
• CVE-2007-6363, published 2007-12-15. Low severity, CVSS 2.1. EPSS: 0.9% chance of exploitation in the next 30 days. IBM Tivoli Netcool Security Manager 1.3.0 before Interim Fix 1, when using Active Directory (AD) LDAP authentication, allows remote attackers to obtain login access via unspecified vectors without…