Vulnerabilities > IBM > Tivoli Application Dependency Discovery Manager > 7.2.2.1

DATE CVE VULNERABILITY TITLE RISK
2019-02-04 CVE-2018-1675 Information Exposure vulnerability in IBM Tivoli Application Dependency Discovery Manager
IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could expose password hashes in stored in system memory on target systems that are configured to use TADDM.
network
low complexity
ibm CWE-200
5.0
2017-04-14 CVE-2016-8927 Cross-site Scripting vulnerability in IBM Tivoli Application Dependency Discovery Manager
IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2017-04-14 CVE-2016-8926 Information Exposure vulnerability in IBM Tivoli Application Dependency Discovery Manager
IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could allow a remote attacker to read system files or data that is restricted to authorized users.
network
low complexity
ibm CWE-200
4.0
2017-04-14 CVE-2016-8925 Information Exposure vulnerability in IBM Tivoli Application Dependency Discovery Manager
IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could allow a remote attacker to include arbitrary files which could allow the attacker to read any file on the system.
network
low complexity
ibm CWE-200
6.8
2014-10-31 CVE-2014-6150 Cross-Site Scripting vulnerability in IBM Tivoli Application Dependency Discovery Manager
Cross-site scripting (XSS) vulnerability in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.1.0 through 7.2.1.6 and 7.2.2.0 through 7.2.2.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
network
ibm CWE-79
3.5
2014-10-31 CVE-2014-6148 Improper Authentication vulnerability in IBM Tivoli Application Dependency Discovery Manager
IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.0.0 through 7.2.0.10, 7.2.1.0 through 7.2.1.6, and 7.2.2.0 through 7.2.2.2 does not require TADDM authentication for rptdesign downloads, which allows remote authenticated users to obtain sensitive database information via a crafted URL.
network
ibm CWE-287
3.5
2014-10-29 CVE-2014-6149 Path Traversal vulnerability in IBM Tivoli Application Dependency Discovery Manager
Directory traversal vulnerability in BIRT-viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.0.0 through 7.2.0.10, 7.2.1.0 through 7.2.1.6, and 7.2.2.0 through 7.2.2.2 allows remote authenticated users to read arbitrary files via unspecified vectors.
network
low complexity
ibm CWE-22
5.0