Skip to content
OpenAdvisories
High WID-SEC-2025-1725 2 CVEs

IBM Tivoli Monitoring: Mehrere Schwachstellen

Published Aug 5, 2025 · Updated Aug 6, 2025 · Revision 2 · de-DE

Vendor: IBM Product: Tivoli Monitoring Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM Tivoli Monitoring ausnutzen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.

Product

Tivoli Monitoring ist eine Systemüberwachungs-Software zum Managen von Betriebssystemen, Datenbanken und Servern in verteilten und Host-Umgebungen.

Vulnerabilities 2

  • High 8.1
    CVE-2025-3320

    IBM Tivoli Monitoring code execution

    IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash.

    IBM Tivoli Monitoring
  • High 8.1
    CVE-2025-3354

    IBM Tivoli Monitoring code execution

    IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash.

    IBM Tivoli Monitoring

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2025-23845, EUVD-2025-23846

  2. #1

    Initiale Fassung

References