IBM Tivoli Provisioning Manager Express For Software Distribution vulnerabilities

2 CVEs affecting IBM Tivoli Provisioning Manager Express For Software Distribution, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-0199, published 2012-03-06.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-0198, published 2012-03-06. High severity, CVSS 9.3. EPSS: 37.4% chance of exploitation in the next 30 days. Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allows remote attackers to…
• CVE-2012-0199, published 2012-03-06. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. Multiple SQL injection vulnerabilities in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allow remote attackers to execute arbitrary SQL commands via (1) a SOAP message to…