IBM Tivoli Provisioning Manager OS Deployment vulnerabilities

4 CVEs affecting IBM Tivoli Provisioning Manager OS Deployment, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-4121, published 2010-10-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-1868, published 2007-04-04. High severity, CVSS 10.0. EPSS: 59.3% chance of exploitation in the next 30 days. The management service in IBM Tivoli Provisioning Manager for OS Deployment before 5.1 Fix Pack 2 does not properly handle multipart/form-data in HTTP POST requests, which allows remote attackers to…
CVE-2008-0401, published 2008-01-23. High severity, CVSS 10.0. EPSS: 8.4% chance of exploitation in the next 30 days. Buffer overflow in the logging functionality of the HTTP server in IBM Tivoli Provisioning Manager for OS Deployment (TPMfOSD) before 5.1.0.3 Interim Fix 3 allows remote attackers to cause a denial…
CVE-2010-4121, published 2010-10-28. High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days. The TCP-to-ODBC gateway in IBM Tivoli Provisioning Manager for OS Deployment 7.1.1.3 does not require authentication for SQL statements, which allows remote attackers to modify, create, or read…
CVE-2007-3268, published 2007-07-18. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. The TFTP implementation in IBM Tivoli Provisioning Manager for OS Deployment 5.1 before Fix Pack 3 allows remote attackers to cause a denial of service (rembo.exe crash and multiple service outage)…