IBM Tivoli Secureway Policy Director vulnerabilities

3 CVEs affecting IBM Tivoli Secureway Policy Director, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-2558, published 2004-12-31.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2001-0982, published 2001-07-23. Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days. Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via encoded .. (dot dot) sequences containing…
• CVE-2004-2558, published 2004-12-31. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e-business 3.9 to 5.1, Access Manager Identity Manager Solution 5.1, Configuration Manager 4.2, Configuration…
• CVE-2001-1191, published 2001-12-11. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. WebSeal in IBM Tivoli SecureWay Policy Director 3.8 allows remote attackers to cause a denial of service (crash) via a URL that ends in %2e.