2016-01-02

2016-01-03

2016-01-04

All (2) Critical (1) High (2) Medium (10) Low (3)

CVE-2015-5003 Jan 03, 05:59 HIGH This Week

The portal in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 before FP7 allows remote authenticated users to execute arbitrary commands by leveraging Take Action view. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. No vendor patch available.

Command Injection IBM Tivoli Monitoring

NVD

CVSS 3.0

8.5

EPSS

1.3%

CVE-2015-5038 Jan 03, 05:59 HIGH This Week

IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3 does not properly detect recursion during XML entity expansion, which allows remote attackers to cause a. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service IBM Connections

NVD

CVSS 3.0

7.5

EPSS

0.9%