Tivoli Application Dependency Discovery Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:tivoli_application_dependency_discovery_manager:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Tivoli Application Dependency Discovery Manager (429d066b-3200-5392-806d-acb633f53b9c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-23227 |
vulnerable | 2026-06-08 07:10:55.382283 |
IBM Tivoli Application Dependency Discovery Manager cross-site scripting
MEDIUM (6.4)
IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.11 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-01-23T17:19:35.814Z
Updated: 2025-02-01T13:39:24.186Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47144 |
vulnerable | 2026-06-08 06:14:24.062893 |
IBM Tivoli Application Dependency Discovery Manager cross-site scripting
MEDIUM (6.1)
IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 270271.
Published: 2024-02-02T13:04:56.709Z
Updated: 2024-08-02T21:01:22.911Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47143 |
vulnerable | 2026-06-08 06:14:24.062468 |
IBM Tivoli Application Dependency Discovery Manager HOST header injection
CRITICAL (10)
IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 270270.
Published: 2024-02-02T13:03:30.881Z
Updated: 2024-08-02T21:01:22.942Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47142 |
vulnerable | 2026-06-08 06:14:24.061865 |
IBM Tivoli Application Dependency Discovery Manager privilege escalation
HIGH (7.5)
IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 could allow an attacker on the organization's local network to escalate their privileges due to unauthorized API access. IBM X-Force ID: 270267.
Published: 2024-02-02T13:22:17.080Z
Updated: 2024-09-20T18:45:56.606Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1675 |
vulnerable | 2026-06-08 05:11:18.588798 |
Details available
MEDIUM (6.8)
IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could expose password hashes in stored in system memory on target systems that are configured to use TADDM. IBM X-Force ID: 145110.
Published: 2019-02-04T21:00:00.000Z
Updated: 2024-09-17T03:14:39.177Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1455 |
vulnerable | 2026-06-08 05:11:18.235431 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4040 |
vulnerable | 2026-06-08 05:04:33.650770 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3023 |
vulnerable | 2026-06-08 05:04:29.875734 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3018 |
vulnerable | 2026-06-08 05:04:29.874844 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3017 |
vulnerable | 2026-06-08 05:04:29.874286 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.