GCVE - cpe:2.3:a:ibm:tivoli_endpoint_manager:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:tivoli_endpoint_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Tivoli Endpoint Manager (`03d4dac8-3ead-5c25-a309-b3f7a1466a3e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-6137`	vulnerable	2026-06-08 05:05:56.502808	Details available Cross-site scripting (XSS) vulnerability in the Relay Diagnostic page in IBM Tivoli Endpoint Manager 9.1 before 9.1.1229 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2015-02-16T00:00:00.000Z Updated: 2024-08-06T12:10:12.094Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/96817 http://www-01.ibm.com/support/docview.wss?uid=swg21692516 http://www.securityfocus.com/bid/72559	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-6113`	vulnerable	2026-06-08 05:05:56.371133	Details available Cross-site scripting (XSS) vulnerability in the Web Reports component in IBM Tivoli Endpoint Manager 9.1 before 9.1.1229 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2015-02-16T00:00:00.000Z Updated: 2024-08-06T12:03:02.564Z Open on db.gcve.eu Reference links http://www-01.ibm.com/support/docview.wss?uid=swg21692516 https://exchange.xforce.ibmcloud.com/vulnerabilities/96210	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0453`	vulnerable	2026-06-08 05:03:48.095794	Details available Cross-site scripting (XSS) vulnerability in Web Reports in IBM Tivoli Endpoint Manager (TEM) before 8.2.1372 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Published: 2013-03-21T20:00:00.000Z Updated: 2024-08-06T14:25:10.318Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/80969 http://www-01.ibm.com/support/docview.wss?uid=swg1IV37766 http://www.ibm.com/support/docview.wss?uid=swg21631351	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1837`	vulnerable	2026-06-08 05:00:51.107639	Details available The (1) webreports, (2) post/create-role, and (3) post/update-role programs in IBM Tivoli Endpoint Manager (TEM) before 8.2 do not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie. Published: 2012-03-22T01:00:00.000Z Updated: 2024-08-06T19:08:38.481Z Open on db.gcve.eu Reference links http://secunia.com/advisories/48352 https://exchange.xforce.ibmcloud.com/vulnerabilities/74038 http://www-01.ibm.com/support/docview.wss?uid=swg21587743	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0718`	vulnerable	2026-06-08 05:00:44.613425	Details available IBM Tivoli Endpoint Manager 8 does not set the HttpOnly flag on cookies. Published: 2020-02-18T17:02:49.000Z Updated: 2024-08-06T18:38:13.449Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/74038	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.