Tivoli Provisioning Manager Express For Software Distribution

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-0199 HIGH This Week

Multiple SQL injection vulnerabilities in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allow remote attackers to execute arbitrary SQL commands via (1) a SOAP message to. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi IBM Tivoli Provisioning Manager Express For Software Distribution

NVD

CVSS 2.0

7.5

EPSS

0.4%

CVE-2012-0198 CRITICAL POC THREAT Emergency

Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allows remote attackers to. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 68.4%.

Buffer Overflow RCE IBM Tivoli Provisioning Manager Express For Software Distribution

NVD Exploit-DB

CVSS 2.0

9.3

EPSS

68.4%

Threat

5.4

CVE-2012-0199

EPSS 0% CVSS 7.5

HIGH This Week

SQLi IBM Tivoli Provisioning Manager Express For Software Distribution

NVD

CVE-2012-0198

EPSS 68% 5.4 CVSS 9.3

CRITICAL POC THREAT Emergency

Buffer Overflow RCE IBM +1

NVD Exploit-DB