High 1 exploited CVE WID-SEC-2023-0016 34 CVEs

IBM Tivoli Monitoring: Mehrere Schwachstellen

Published Jan 3, 2023 · Updated Jan 3, 2023 · de-DE

Vendor: IBM Product: Tivoli Monitoring Product: Tivoli Monitoring 6.3.0 Product: Tivoli Monitoring 6.3.0.1 Product: Tivoli Monitoring 6.3.0.2 Product: Tivoli Monitoring 6.3.0.3 Product: Tivoli Monitoring 6.3.0.4 Product: Tivoli Monitoring 6.3.0.5 Product: Tivoli Monitoring 6.3.0.6 Product: Tivoli Monitoring 6.3.0.7 Product: Tivoli Monitoring for Virtual Environments Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Tivoli Monitoring ausnutzen, um die Kontrolle über das System zu erlangen, vertrauliche Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, sowie weitere nicht spezifizierte Auswirkungen zu ereichen.

Product

Tivoli Monitoring ist eine Systemüberwachungs-Software zum Managen von Betriebssystemen, Datenbanken und Servern in verteilten und Host-Umgebungen.

Vulnerabilities 34

Critical 9.8

CVE-2022-22965 Exploited Public exploit Scanner template EPSS 100%

Remote Code Execution in Spring Framework

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot…

libspring-java libspring-java org.springframework:spring-webmvc org.springframework:spring-webflux Debian Ubuntu Maven

Apr 1, 2022
KEV Apr 4, 2022
High 8.3

CVE-2020-14583

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 15, 2020
High 8.3

CVE-2020-2803

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 15, 2020
High 8.3

CVE-2020-2805

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 15, 2020
High 7.4

CVE-2020-14593

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are a…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 15, 2020
Medium 6.8

CVE-2020-2601

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 15, 2020
Medium 5.9

CVE-2021-2161

Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component:…

Oracle Java SE JDK and JRE openjdk-9-jre openjdk-10 Ubuntu Alpine Wolfi

Apr 22, 2021
Medium 5.3

CVE-2020-14621

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 15, 2020
Medium 5.3

CVE-2020-14803

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are…

Oracle Java SE JDK and JRE GraalVM Enterprise Edition openjdk-8 Debian Ubuntu Alpine Wolfi

Oct 21, 2020
Medium 5.3

CVE-2020-2781

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 15, 2020
Medium 5.3

CVE-2020-2830

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions t…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 15, 2020
Medium 4.8

CVE-2020-14556

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 15, 2020
Medium 4.8

CVE-2020-2800

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supporte…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 15, 2020
Medium 4.2

CVE-2020-14792

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that …

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 21, 2020
Low 3.7

CVE-2020-14577

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 15, 2020
Low 3.7

CVE-2020-14578

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Oracle Java openjdk-8 openjdk8 Debian Ubuntu Alpine

Jul 15, 2020
Low 3.7

CVE-2020-14579

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Oracle Java openjdk-8 openjdk8 Debian Ubuntu Alpine

Jul 15, 2020
Low 3.7

CVE-2020-14581

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are a…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 15, 2020
Low 3.7

CVE-2020-14779

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 21, 2020
Low 3.7

CVE-2020-14781

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 21, 2020
Low 3.7

CVE-2020-14782

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 21, 2020
Low 3.7

CVE-2020-14797

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 21, 2020
Low 3.7

CVE-2020-2590

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 15, 2020
Low 3.7

CVE-2020-2654

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 15, 2020
Low 3.7

CVE-2020-2754

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions tha…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 15, 2020
Low 3.7

CVE-2020-2755

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions tha…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 15, 2020
Low 3.7

CVE-2020-2756

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 15, 2020
Low 3.7

CVE-2020-2757

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 15, 2020
Low 3.7

CVE-2020-2773

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 15, 2020
Low 3.1

CVE-2020-14796

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 21, 2020
Low 3.1

CVE-2020-14798

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 21, 2020
Unscored —

CVE-2019-17639

In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer th…

The Eclipse Foundation Eclipse OpenJ9

Jul 15, 2020
Unscored —

CVE-2019-2949

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2020-27221

In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtu…

The Eclipse Foundation Eclipse OpenJ9

Jan 21, 2021

Revision history

2023-01-03 #1
Initiale Fassung

References

IBM Security Bulletin vom 2023-01-03
https://www.ibm.com/support/pages/node/6587154
IBM Security Bulletin vom 2023-01-03
https://www.ibm.com/support/pages/node/6472877
IBM Security Bulletin vom 2023-01-03
https://www.ibm.com/support/pages/node/6466307
IBM Security Bulletin vom 2023-01-03
https://www.ibm.com/support/pages/node/6466303
IBM Security Bulletin vom 2023-01-03
https://www.ibm.com/support/pages/node/6438833
IBM Security Bulletin vom 2023-01-03
https://www.ibm.com/support/pages/node/6376752
IBM Security Bulletin vom 2023-01-03
https://www.ibm.com/support/pages/node/6252467