IBM Trivoli Service Request Manager vulnerabilities

5 CVEs affecting IBM Trivoli Service Request Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-0195, published 2012-03-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-1394, published 2012-03-13. Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days. IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service…
CVE-2012-0195, published 2012-03-13. Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Start Center Layout and Configuration component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset…
CVE-2011-4816, published 2012-03-13. Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days. SQL injection vulnerability in the KPI component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli…
CVE-2011-4817, published 2012-03-13. Medium severity, CVSS 4.0. EPSS: 1.2% chance of exploitation in the next 30 days. The About option on the Help menu in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request…
CVE-2011-1397, published 2012-03-13. Medium severity, CVSS 6.8. EPSS: 1% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in the Labor Reporting page in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2,…