Ibm Tivoli Netcool/impact — known CVE vulnerabilities

Every CVE whose affected-product data names Ibm Tivoli Netcool/impact, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (13)

• CVE-2020-4237 — CVSS 8.8 (high): IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site request forgery which could allow an attacker to execute…
• CVE-2020-4238 — CVSS 8.8 (high): IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site request forgery which could allow an attacker to execute…
• CVE-2026-4788 — CVSS 8.4 (high): IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.37 stores sensitive information in log files that could be read by a local user.
• CVE-2019-4103 — CVSS 8.0 (high): IBM Tivoli Netcool/Impact 7.1.0 allows for remote execution of command by low privileged User. Remote code execution allow to execute…
• CVE-2021-29794 — CVSS 7.5 (high): IBM Tivoli Netcool/Impact 7.1.0.20 and 7.1.0.21 uses an insecure SSH server configuration which enables weaker than expected cryptographic…
• CVE-2020-4236 — CVSS 6.5 (medium): IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow an authenticated user to cause a denial of service due to improper content…
• CVE-2020-4849 — CVSS 6.1 (medium): IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.19 Interim Fix 7 could allow a remote attacker to bypass security restrictions, caused by a…
• CVE-2019-4681 — CVSS 6.1 (medium): IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site scripting. This vulnerability allows users to embed…
• CVE-2020-4235 — CVSS 5.4 (medium): IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site scripting. This vulnerability allows users to embed…
• CVE-2019-4569 — CVSS 5.4 (medium): IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.16 is vulnerable to cross-site scripting. This vulnerability allows users to embed…
• CVE-2020-4239 — CVSS 5.3 (medium): IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow a remote attacker to obtain sensitive information when a detailed technical…
• CVE-2019-4570 — CVSS 5.3 (medium): IBM Tivoli Netcool Impact 7.1.0 through 7.1.0.16 generates an error message that includes sensitive information about its environment…
• CVE-2014-6161 — CVSS 3.5 (low): Cross-site scripting (XSS) vulnerability in IBM Tivoli Netcool/Impact 6.1.1 before 6.1.1.1-TIV-NCI-IF0001 allows remote authenticated users…