GCVE - cpe:2.3:a:ibm:tivoli_remote_control:5.1.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:tivoli_remote_control:5.1.2:*:*:*:*:*:*:*

part: a version: 5.1.2 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Tivoli Remote Control (`d2991a29-1d08-5b3b-97cd-0eb1c5eeb80c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-5461`	vulnerable	2026-06-08 05:04:51.747905	Details available IBM Endpoint Manager for Remote Control 9.0.0 and 9.0.1 and Tivoli Remote Control 5.1.2 store multiple hashes of partial passwords, which makes it easier for remote attackers to decrypt passwords by leveraging access to the hashes. IBM X-Force ID: 88309. Published: 2018-04-27T16:00:00.000Z Updated: 2024-08-06T17:15:20.396Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/88309 https://www.ibm.com/blogs/psirt/ibm-security-bulletin-insecure-storage-of-passwords-in-tivoli-remote-control-cve-2013-5461/ https://www.ibm.com/blogs/psirt/ibm-security-bulletin-insecure-storage-of-passwords-in-ibm-endpoint-manager-for-remote-control-cve-2013-5461/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3033`	vulnerable	2026-06-08 05:04:29.943474	Details available SQL injection vulnerability in the server component in IBM Tivoli Remote Control 5.1.2 before 5.1.2-TIV-TRC512-IF0015 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Published: 2013-07-28T14:00:00.000Z Updated: 2024-08-06T16:00:09.554Z Open on db.gcve.eu Reference links http://www-01.ibm.com/support/docview.wss?uid=swg21643363 https://exchange.xforce.ibmcloud.com/vulnerabilities/84645	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4823`	vulnerable	2026-06-08 05:02:52.764800	Details available Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allows remote attackers to execute arbitrary code via vectors related to "insecure use of the java.lang.ClassLoder defineClass() method." Published: 2013-01-11T00:00:00.000Z Updated: 2024-08-06T20:50:17.295Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2012-1466.html http://www-01.ibm.com/support/docview.wss?uid=swg21616616 http://www-01.ibm.com/support/docview.wss?uid=swg21616594 http://www-01.ibm.com/support/docview.wss?uid=swg21616617 http://www-01.ibm.com/support/docview.wss?uid=swg21621154	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4822`	vulnerable	2026-06-08 05:02:52.761189	Details available Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via vectors related to "insecure use [of] multiple methods in the java.lang.class class." Published: 2013-01-11T00:00:00.000Z Updated: 2024-08-06T20:50:16.938Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2012-1466.html http://www-01.ibm.com/support/docview.wss?uid=swg21616616 http://www-01.ibm.com/support/docview.wss?uid=swg21616594 http://www-01.ibm.com/support/docview.wss?uid=swg21616617 http://www-01.ibm.com/support/docview.wss?uid=swg21621154	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4821`	vulnerable	2026-06-08 05:02:52.757703	Details available Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via "insecure use" of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods. Published: 2013-01-11T00:00:00.000Z Updated: 2024-08-06T20:50:16.927Z Open on db.gcve.eu Reference links http://www-01.ibm.com/support/docview.wss?uid=swg21616616 http://www-01.ibm.com/support/docview.wss?uid=swg21616594 https://exchange.xforce.ibmcloud.com/vulnerabilities/78765 http://www-01.ibm.com/support/docview.wss?uid=swg21616617 http://www-01.ibm.com/support/docview.wss?uid=swg21621154	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4820`	vulnerable	2026-06-08 05:02:52.750423	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.