GCVE - cpe:2.3:a:ibm:tivoli_storage_manager:6.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:tivoli_storage_manager:6.4:*:*:*:*:*:*:*

part: a version: 6.4 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Tivoli Storage Manager (`1bb99743-5532-54e2-bfa8-04d6161687cb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-2894`	vulnerable	2026-06-08 05:07:43.670976	Details available IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 through 6.3 before 6.3.2.6, 6.4 before 6.4.3.3, and 7.1 before 7.1.6 allows local users to obtain sensitive retrieved data from arbitrary accounts in opportunistic circumstances by leveraging previous use of a symlink during archive and retrieve actions. Published: 2016-07-03T21:00:00.000Z Updated: 2024-08-05T23:40:13.774Z Open on db.gcve.eu Reference links http://www-01.ibm.com/support/docview.wss?uid=swg21985579 http://www-01.ibm.com/support/docview.wss?uid=swg1IT13686 http://www.securityfocus.com/bid/91534 http://www.securitytracker.com/id/1036220	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-4951`	vulnerable	2026-06-08 05:06:48.239162	Details available Client Acceptor Daemon (CAD) in the client in IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 and 6.x before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.3 allows remote attackers to cause a denial of service (daemon crash) via a crafted Web client URL. Published: 2016-01-20T02:00:00.000Z Updated: 2024-08-06T06:32:31.540Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1034692 http://www-01.ibm.com/support/docview.wss?uid=swg21973484	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-6195`	vulnerable	2026-06-08 05:05:56.770231	Details available The (1) Java GUI and (2) Web GUI components in the IBM Tivoli Storage Manager (TSM) Backup-Archive client 5.4 and 5.5 before 5.5.4.4 on AIX, Linux, and Solaris; 5.4.x and 5.5.x on Windows and z/OS; 6.1 before 6.1.5.7 on z/OS; 6.1 and 6.2 before 6.2.5.2 on Windows, before 6.2.5.3 on AIX and Linux x86, and before 6.2.5.4 on Linux Z and Solaris; 6.3 before 6.3.2.1 on AIX, before 6.3.2.2 on Windows, and before 6.3.2.3 on Linux; 6.4 before 6.4.2.1; and 7.1 before 7.1.1 in IBM TSM for Mail, when the Data Protection for Lotus Domino component is used, allow local users to bypass authentication and restore a Domino database or transaction-log backup via unspecified vectors. Published: 2015-02-14T02:00:00.000Z Updated: 2024-08-06T12:10:13.161Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/98607 http://www-01.ibm.com/support/docview.wss?uid=swg21695183 http://www-01.ibm.com/support/docview.wss?uid=swg1IT04249	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4818`	vulnerable	2026-06-08 05:05:46.165317	Details available dsmtca in the client in IBM Tivoli Storage Manager (TSM) 5.4.x, 5.5.x, 6.x before 6.4.3, and 7.1.x before 7.1.2 allows local users to discover the backup/restore encryption-key password via unspecified vectors. Published: 2015-02-24T20:00:00.000Z Updated: 2024-08-06T11:27:36.814Z Open on db.gcve.eu Reference links http://www-01.ibm.com/support/docview.wss?uid=swg21697022 http://www.securitytracker.com/id/1031795 http://www.securityfocus.com/bid/72771 http://www-01.ibm.com/support/docview.wss?uid=swg1IT06016	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.