IBM Tivoli Provisioning Manager Express vulnerabilities

2 CVEs affecting IBM Tivoli Provisioning Manager Express, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-6408, published 2007-12-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-6408, published 2007-12-17. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. IBM Tivoli Provisioning Manager Express provides unspecified information in error messages when (1) attempted duplication of a username occurs when creating an account or (2) when trying to login…
CVE-2007-6407, published 2007-12-17. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Provisioning Manager Express allow remote attackers to inject arbitrary web script or HTML via the (1) "assess modification," (2)…