Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:tivoli_storage_manager:7.1.7:*:*:*:*:*:*:*

part: a version: 7.1.7 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductTivoli Storage Manager (1bb99743-5532-54e2-bfa8-04d6161687cb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1339 vulnerable 2026-06-08 05:09:21.803730 Details available
IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password. A database administrator may be able to decrypt the IBM Spectrum protect client or administrator password which can result in information disclosure or a denial of service. IBM X-Force ID: 126247.
Published: 2017-10-05T17:00:00.000Z
Updated: 2024-09-16T17:34:11.313Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8998 vulnerable 2026-06-08 05:08:22.366244 Details available
IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buffer overflow using a specially crafted SQL query and execute arbitrary code on the server. IBM Reference #: 1998747.
Published: 2017-02-24T18:00:00.000Z
Updated: 2024-08-06T02:35:02.321Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8940 vulnerable 2026-06-08 05:08:22.202294 Details available
IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, an attacker is able to submit SQL queries that access database tables that are not intended for access or use by administrators. The access of these product specific database tables may allow access to passwords or other sensitive information for the product. IBM Reference #: 1998946.
Published: 2017-03-07T17:00:00.000Z
Updated: 2024-08-06T02:35:02.336Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8939 vulnerable 2026-06-08 05:08:22.193519 Details available
IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) clients/agents store password information in the Windows Registry in a manner which can be compromised. IBM X-Force ID: 118790.
Published: 2017-06-07T17:00:00.000Z
Updated: 2024-08-06T02:35:02.305Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8937 vulnerable 2026-06-08 05:08:22.165436 Details available
The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol is vulnerable to a brute force attack due to disclosing too much information during authentication. An attacker could gain user or administrative access to the TSM server. IBM X-Force ID: 118750.
Published: 2017-10-05T17:00:00.000Z
Updated: 2024-09-16T16:53:53.088Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6046 vulnerable 2026-06-08 05:07:58.698988 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6045 vulnerable 2026-06-08 05:07:58.698110 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6044 vulnerable 2026-06-08 05:07:58.697197 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6043 vulnerable 2026-06-08 05:07:58.695989 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.