Ibm Tivoli Business Service Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Ibm Tivoli Business Service Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2016-0286 — CVSS 8.8 (high): IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP0004 allows remote authenticated…
• CVE-2016-0311 — CVSS 5.4 (medium): Cross-site scripting (XSS) vulnerability in IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before…
• CVE-2007-1940 — CVSS 4.9 (medium): IBM Tivoli Business Service Manager (TBSM) 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain…
• CVE-2014-3031 — CVSS 3.5 (low): Cross-site scripting (XSS) vulnerability in IBM Tivoli Business Service Manager 4.2.0 before 4.2.0.0 IF12 and 4.2.1 before 4.2.1.3 IF9…
• CVE-2020-4344 — CVSS 3.3 (low): IBM Tivoli Business Service Manager 6.2.0.0 - 6.2.0.2 IF 1 allows web pages to be stored locally which can be read by another user on the…
• CVE-2008-0441 — CVSS 2.1 (low): IBM Tivoli Business Service Manager (TBSM) 4.1.1 stores passwords in cleartext (1) after external authentication, which triggers writing…