Approved changes feed: RSS · Atom

cpe:2.3:a:ibm_corporation:tivoli_storage_manager_extended_edition:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm Corporation (d12a6641-f3f1-52ca-aee3-0e264bbe9c89)
ProductTivoli Storage Manager Extended Edition (1f32a404-b34a-5f16-ab5a-fc52f5ce2e80)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-6046 vulnerable 2026-06-08 05:07:58.698616 Details available
IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-06T01:22:19.902Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6045 vulnerable 2026-06-08 05:07:58.697740 Details available
IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-06T01:22:20.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6044 vulnerable 2026-06-08 05:07:58.696799 Details available
IBM Tivoli Storage Manager Operations Center could allow an authenticated attacker to enable or disable the application's REST API, which may let the attacker violate security policy.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-06T01:22:18.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6043 vulnerable 2026-06-08 05:07:58.685180 Details available
Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to session expiration not being enforced.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-06T01:22:18.933Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.