Skip to content
OpenAdvisories
Medium WID-SEC-2023-1112 6 CVEs

IBM Tivoli Business Service Manager: Mehrere Schwachstellen ermöglichen Denial of Service

Published May 1, 2023 · Updated May 1, 2023 · de-DE

Vendor: IBM Product: Tivoli Business Service Manager < 6.2.0.5 Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM Tivoli Business Service Manager ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

IBM Tivoli Business Service Manager verschafft Unternehmen, öffentlichen Einrichtungen und Serviceanbietern über zielgruppenspezifische, echtzeitorientierte Dashboards detaillierte Einsichten in Services und Prozesse.

Vulnerabilities 6

  • High 7.5
    CVE-2022-40153 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and…

  • High 7.5
    CVE-2022-40154 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and…

  • High 7.5
    CVE-2022-40155 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and…

  • High 7.5
    CVE-2022-40156 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and…

  • Medium 6.5
    CVE-2022-40151

    Stack Buffer Overflow in xstream

    Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial o…

    x-stream xstream libxstream-java com.thoughtworks.xstream:xstream Debian Ubuntu Maven
  • Medium 6.5
    CVE-2022-40152 EPSS 18%

    Stack Buffer Overflow in Woodstox

    Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effec…

    x-stream Woodstox libxstream-java sonarqube-10 Debian Ubuntu Wolfi Maven

Revision history

  1. #1

    Initiale Fassung

References