Vulnerabilities > IBM > Tivoli Business Service Manager
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-09-15 | CVE-2020-4344 | Insecure Storage of Sensitive Information vulnerability in IBM Tivoli Business Service Manager 6.2.0.0 IBM Tivoli Business Service Manager 6.2.0.0 - 6.2.0.2 IF 1 allows web pages to be stored locally which can be read by another user on the system. | 2.1 |
| 2018-03-09 | CVE-2016-0286 | Information Exposure vulnerability in IBM Tivoli Business Service Manager 6.1.0/6.1.1 IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP0004 allows remote authenticated users to obtain administrator passwords by leveraging unspecified privileges. | 4.0 |
| 2018-02-02 | CVE-2016-0311 | Cross-site Scripting vulnerability in IBM Tivoli Business Service Manager 6.1.0/6.1.1 Cross-site scripting (XSS) vulnerability in IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP0004 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 3.5 |
| 2014-08-12 | CVE-2014-3031 | Cross-Site Scripting vulnerability in IBM Tivoli Business Service Manager 4.2/4.2.1 Cross-site scripting (XSS) vulnerability in IBM Tivoli Business Service Manager 4.2.0 before 4.2.0.0 IF12 and 4.2.1 before 4.2.1.3 IF9 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. | 3.5 |
| 2008-01-25 | CVE-2008-0441 | Unspecified vulnerability in IBM Tivoli Business Service Manager 4.1.1 IBM Tivoli Business Service Manager (TBSM) 4.1.1 stores passwords in cleartext (1) after external authentication, which triggers writing the password to SM_server.log; and (2) after a reconfig action; which allows local users to obtain sensitive information. | 2.1 |
| 2007-04-11 | CVE-2007-1940 | Unspecified vulnerability in IBM Tivoli Business Service Manager 4.1 IBM Tivoli Business Service Manager (TBSM) 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain sensitive information by reading (1) ncisetup.db or (2) msi.log. | 4.9 |