CVE-2015-5003

Description

The portal in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 before FP7 allows remote authenticated users to execute arbitrary commands by leveraging Take Action view authority and providing crafted input.

Risk Information

Base Score

8.5

MODERATE

Vector

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS Score

Exploitation Probability

1.325

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in IBM Tivoli Monitoring 6.2.2	Windows
Multiple Vulnerabilities are affected in IBM Tivoli Monitoring 6.2.3	Windows
Multiple Vulnerabilities are affected in IBM Tivoli Monitoring 6.3.0	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234