CVE-2014-6149

CVE-2014-6149 relates to a directory traversal in the BIRT-viewer component embedded in IBM Tivoli Application Dependency Discovery Manager (TADDM). Affected TADDM versions: 7.2.0.0–7.2.0.10, 7.2.1.0–7.2.1.6, and 7.2.2.0–7.2.2.2. The underlying issue allows a remote authenticated user to read arb...

PT-2014-7068

Name of the Vulnerable Software and Affected Versions IBM Tivoli Application Dependency Discovery Manager TADDM versions 7.2.0.0 through 7.2.0.10 IBM Tivoli Application Dependency Discovery Manager TADDM versions 7.2.1.0 through 7.2.1.6 IBM Tivoli Application Dependency Discovery Manager TADDM...

CVE-2013-3004

CVE-2013-3004 is a directory traversal vulnerability embedded in the IBM TADDM BIRT-Report Viewer component. The issue affects IBM TADDM 7.1.x and 7.2.x up to but before 7.2.1.5, where remote authenticated users could read arbitrary files on the server via unspecified vectors. The root cause is i...

CVE-2013-2974

The CVE describes a bypass of authorization in IBM Tivoli Application Dependency Discovery Manager (TADDM) via the BIRT viewer. Affected software: TADDM 7.2.1.x prior to 7.2.1.5 (including 7.2.1.0–7.2.1.4). Root cause: incorrect authorization checks in the BIRT reporting URL allow crafted paramet...

Cross site scripting

Cross-site scripting XSS vulnerability in the Data Management Portal Web User Interface in IBM Tivoli Application Dependency Discovery Manager TADDM 7.2.x before 7.2.1.4 allows remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors...

CVE-2012-5939

IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x is affected by CVE-2012-5939: a cross-site scripting vulnerability in Welcome.do within the Data Management Portal Web UI that allows remote authenticated users to inject arbitrary script via a crafted URL. Impact includes potentia...

PT-2013-1844

Name of the Vulnerable Software and Affected Versions IBM Tivoli Application Dependency Discovery Manager TADDM versions 7.2.x before 7.2.1.4 Description The issue in the SSL configuration makes it easier for man-in-the-middle attackers to spoof servers and decrypt network traffic via a brute-for...