DeutschShown in its original language — a full translation is planned for a future version.
IBM Tivoli Monitoring: Mehrere Schwachstellen
view advisory published 2023-01-03
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Tivoli Monitoring ausnutzen, um die Kontrolle über das System zu erlangen, vertrauliche Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, sowie weitere nicht spezifizierte Auswirkungen zu ereichen.
01
describes (34)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-22965US | critical9.8OT critical | KEV | ||
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run… | ||||
| CVE-2021-2161US | medium4.3 | — | ||
Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE… | ||||
| CVE-2020-27221US | critical9.8 | — | ||
In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 character… | ||||
| CVE-2020-14803US | medium5.0 | — | ||
Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 11.0.8 and 15. Easily exploitable vulnerability all… | ||||
| CVE-2020-14798US | low2.6 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java… | ||||
| CVE-2020-14797US | medium4.3 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java… | ||||
| CVE-2020-14796US | low2.6 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java… | ||||
| CVE-2020-14792US | medium5.8 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java S… | ||||
| CVE-2020-14782US | medium4.3 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java… | ||||
| CVE-2020-14781US | medium4.3 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE E… | ||||
| CVE-2020-14779US | medium4.3 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15;… | ||||
| CVE-2019-17639US | medium5.3 | — | ||
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in cert… | ||||
| CVE-2020-14621US | medium5.0 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java… | ||||
| CVE-2020-14593US | medium4.3 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE… | ||||
| CVE-2020-14583US | medium5.1 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1;… | ||||
| CVE-2020-14581US | medium4.3 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedd… | ||||
| CVE-2020-14579US | medium4.3 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded… | ||||
| CVE-2020-14578US | medium4.3 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded… | ||||
| CVE-2020-14577US | medium4.3 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java… | ||||
| CVE-2020-14556US | medium5.8 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE… | ||||
showing 20 of 34
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2023-0016 - CSAF Versionself
- WID-SEC-2023-0016 - Portal Versionself
- IBM Security Bulletin vom 2023-01-03external
- IBM Security Bulletin vom 2023-01-03external
- IBM Security Bulletin vom 2023-01-03external
- IBM Security Bulletin vom 2023-01-03external
- IBM Security Bulletin vom 2023-01-03external
- IBM Security Bulletin vom 2023-01-03external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan