IBM Tivoli Storage Manager Client vulnerabilities

8 CVEs affecting IBM Tivoli Storage Manager Client, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-1522, published 2009-05-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-4880, published 2007-09-28. High severity, CVSS 10.0. EPSS: 75.9% chance of exploitation in the next 30 days. Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2…
CVE-2008-4828, published 2009-05-05. High severity, CVSS 10.0. EPSS: 71.5% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through…
CVE-2008-4801, published 2008-10-31. High severity, CVSS 10.0. EPSS: 11.4% chance of exploitation in the next 30 days. Heap-based buffer overflow in the Data Protection for SQL CAD service (aka dsmcat.exe) in the Client Acceptor Daemon (CAD) and the scheduler in the Backup-Archive client 5.1.0.0 through 5.1.8.1,…
CVE-2009-1520, published 2009-05-05. High severity, CVSS 10.0. EPSS: 3.3% chance of exploitation in the next 30 days. Buffer overflow in the Web GUI in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through…
CVE-2009-1522, published 2009-05-05. High severity, CVSS 7.1. EPSS: 2.1% chance of exploitation in the next 30 days. The IBM Tivoli Storage Manager (TSM) client 5.5.0.0 through 5.5.1.17 on AIX and Windows, when SSL is used, allows remote attackers to conduct unspecified man-in-the-middle attacks and read arbitrary…
CVE-2007-5022, published 2007-09-21. Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days. Unspecified vulnerability in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2, when using "server-initiated prompted…
CVE-2009-1521, published 2009-05-05. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the Java GUI in the IBM Tivoli Storage Manager (TSM) client 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.5, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17, and…
CVE-2007-4348, published 2007-10-30. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the CAD service in IBM Tivoli Storage Manager (TSM) Client 5.3.5.3 and 5.4.1.2 for Windows allows remote attackers to inject arbitrary web script or HTML…