CVE-2016-5963 (security_privileged_identity_manager_virtual_appliance)
IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 does not properly validate updates, which allows remote authenticated users to execute arbitrary code via unspecified vectors.
Source: CVE-2016-5963 (security_privileged_identity_manager_virtual_appliance)
CVE-2016-5963
IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 does not properly validate updates, which allows remote authenticated users to execute arbitrary code via unspecified vectors.
Source: CVE-2016-5963
CVE-2016-5957 (security_privileged_identity_manager_virtual_appliance)
IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 allows remote attackers to defeat cryptographic protection mechanisms and obtain sensitive information by leveraging a weak algorithm.
Source: CVE-2016-5957 (security_privileged_identity_manager_virtual_appliance)
CVE-2016-5957
IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 allows remote attackers to defeat cryptographic protection mechanisms and obtain sensitive information by leveraging a weak algorithm.
Source: CVE-2016-5957
CVE-2016-5947 (spectrum_control, tivoli_storage_productivity_center)
IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to conduct clickjacking attacks via a crafted web site.
Source: CVE-2016-5947 (spectrum_control, tivoli_storage_productivity_center)
CVE-2016-5947
IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to conduct clickjacking attacks via a crafted web site.
Source: CVE-2016-5947
CVE-2016-5946 (spectrum_control, tivoli_storage_productivity_center)
Directory traversal vulnerability in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL.
Source: CVE-2016-5946 (spectrum_control, tivoli_storage_productivity_center)
CVE-2016-5946
Directory traversal vulnerability in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL.
Source: CVE-2016-5946
CVE-2016-5945 (spectrum_control, tivoli_storage_productivity_center)
IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to upload non-executable files via a crafted HTTP request.
Source: CVE-2016-5945 (spectrum_control, tivoli_storage_productivity_center)
CVE-2016-5945
IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to upload non-executable files via a crafted HTTP request.
Source: CVE-2016-5945