IBM Tivoli Storage Flashcopy Manager vulnerabilities

6 CVEs affecting IBM Tivoli Storage Flashcopy Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-7404, published 2015-11-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-3976, published 2014-03-26. Low severity, CVSS 2.1. EPSS: 0.9% chance of exploitation in the next 30 days. The (1) Data Protection for Exchange component 6.1 before 6.1.3.4 and 6.3 before 6.3.1 in IBM Tivoli Storage Manager for Mail and the (2) FlashCopy Manager for Exchange component 2.2 and 3.1 before…
CVE-2015-1988, published 2015-10-04. Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware 6.3 before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.3 and Tivoli…
CVE-2015-7404, published 2015-11-14. Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server (aka Spectrum Protect for Databases) 5.5 before 5.5.6.2, 6.3 before 6.3.1.6, 6.4 before 6.4.1.8, and 7.1 before…
CVE-2015-4949, published 2015-08-23. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server 7.1 before 7.1.2, Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server 7.1 before 7.1.2,…
CVE-2015-6557, published 2015-08-23. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server 5.5 before 5.5.6.1, 6.3 before 6.3.1.5, 6.4 before 6.4.1.7, and 7.1 before 7.1.2; Tivoli Storage Manager for Mail:…
CVE-2013-6714, published 2014-05-26. Medium severity, CVSS 4.1. EPSS: 0.3% chance of exploitation in the next 30 days. The FlashCopy Manager for VMware component in IBM Tivoli Storage FlashCopy Manager 3.1 through 4.1.0.1 does not properly check authorization for backup and restore operations, which allows local…