CVE-2013-5562

CVE-2013-5562 affects the ITM web server in Cisco Prime Central for Hosted Collaboration Solution (HCS). A remote attacker can cause a denial-of-service (temporary HTTP service outage) by flooding the ITM port with TCP packets. Root cause is the ITM port’s inability to handle a TCP flood. Exploit...

CVE-2013-5562: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ITM web server in Cisco Prime Central for Hosted Collaboration Solution HCS allows remote attackers to cause a denial of service temporary HTTP service outage via a flood of TCP packets, aka Bug ID CSCuh36313...

Cisco Prime Central for Hosted Collaboration Solution Denial of Service Vulnerability

A vulnerability in the ITM web server interface of the Cisco Prime Central for Hosted Collaboration Solution HCS could allow an unauthenticated, remote attacker to cause a denial of service on the targeted device. The vulnerability is due to the ITM port being unable to deal with a TCP flood. An...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Basic Services component in IBM Tivoli Monitoring ITM 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business formerly Tivoli Foundations Application Manager 1.2.1...

CVE-2013-0548

CVE-2013-0548 affects IBM Tivoli Monitoring Basic Services (ITM) and IBM Application Manager for Smart Business. The vulnerability is a cross-site scripting (XSS) issue in Basic Services that could allow remote attackers to inject arbitrary script via unspecified vectors. Affected ITM versions in...

CVE-2013-0551

CVE-2013-0551 affects IBM Tivoli Monitoring Basic Services in ITM 6.2.x (6.2.0[FP3], 6.2.1[FP4], 6.2.2[FP9], 6.2.3 before FP3) as used by IBM Application Manager for Smart Business. Description: specially crafted URLs can cause an abend/DoS in the Tivoli Monitoring process. IBM’s remediation invo...

CVE-2013-2960

The CVE-2013-2960 issue affects IBM Tivoli Monitoring (ITM) Basic Services, specifically the KDSMAIN HTTP processing, where a crafted URL can trigger a buffer overflow and cause a segmentation fault (remote DoS). Affected ITM versions include 6.2.0–6.2.3 with various FP levels (notably FP3 for 6....

CVE-2013-2961

CVE-2013-2961 affects IBM Tivoli Monitoring (ITM) Basic Services, used in IBM Application Manager for Smart Business. The issue arises in the ITM Basic Services web server handling crafted HTTP traffic, allowing remote attackers to redirect HTTP requests and bypass proxy-server configuration. Aff...

CVE-2013-1157

Technical details about CVE-2013-1157 are not publicly available in the provided documents. Monitor for updates.

CVE-2013-1158

CVE-2013-1158 affects the IBM Tivoli Monitoring (ITM) help menus in Cisco Prime Central for Hosted Collaboration Solution. It describes a Cross-site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. The description does...

PT-2013-2926

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution affected versions not specified Description A cross-site scripting XSS issue exists in the IBM Tivoli Monitoring ITM help menus, allowing remote attackers to inject arbitrary web script or...

Code injection

The web console in CA formerly Computer Associates eTrust ITM Threat Manager 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689...

Information disclosure

CA formerly Computer Associates eTrust ITM Threat Manager 8.1 stores sensitive user information in log files with predictable names, which allows remote attackers to obtain this information via unspecified vectors...

CVE-2007-5437

The web console in CA formerly Computer Associates eTrust ITM Threat Manager 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689...

CVE-2007-5437

The web console in CA formerly Computer Associates eTrust ITM Threat Manager 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689...

CVE-2007-5439

CA formerly Computer Associates eTrust ITM Threat Manager 8.1 stores sensitive user information in log files with predictable names, which allows remote attackers to obtain this information via unspecified vectors...

CVE-2007-5437

The CVE-2007-5437 entry affects CA eTrust ITM (Threat Manager) 8.1, where the web console allows remote attackers to redirect users to arbitrary web sites by supplying a crafted HTTP URL targeting port 6689. This describes a client redirection vulnerability in the web interface, with no explicit ...

CVE-2007-5439

CVE-2007-5439 affects CA eTrust ITM (Threat Manager) 8.1. The issue is that sensitive user information is stored in log files with predictable names, allowing a remote attacker to obtain the data via unspecified vectors. This is stated across the CVE records, including NVD, and connected document...

CVE-2007-5437: Improper Link Resolution Before File Access

The web console in CA formerly Computer Associates eTrust ITM Threat Manager 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689...

CVE-2007-5439: Exposure of Sensitive Information to an Unauthorized Actor

CA formerly Computer Associates eTrust ITM Threat Manager 8.1 stores sensitive user information in log files with predictable names, which allows remote attackers to obtain this information via unspecified vectors...