Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:tivoli_workload_scheduler:9.5:*:*:*:*:*:*:*

part: a version: 9.5 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductTivoli Workload Scheduler (1adf4e05-1180-5603-944a-ffbfd9743900)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-49351 vulnerable 2026-06-08 06:50:13.577420 IBM Workload Scheduler information disclosure
MEDIUM (5.5)
IBM Workload Scheduler 9.5, 10.1, and 10.2 stores user credentials in plain text which can be read by a local user.
Published: 2024-11-26T03:11:52.593Z
Updated: 2024-11-26T15:42:29.302Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38389 vulnerable 2026-06-08 05:47:16.274879 IBM Tivoli Workload Scheduler XML external entity injection
HIGH (7.1)
IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 233975.
Published: 2023-02-02T18:00:54.967Z
Updated: 2025-03-25T19:49:50.851Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22486 vulnerable 2026-06-08 05:40:53.820216 IBM Tivoli Workload Scheduler XML external entity injection
CRITICAL (10)
IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226328.
Published: 2023-02-02T17:45:36.250Z
Updated: 2025-03-27T13:32:38.748Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20349 vulnerable 2026-06-08 05:29:09.117844 Details available
MEDIUM (5.9)
IBM Tivoli Workload Scheduler 9.4 and 9.5 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and gain lower level privileges. IBM X-Force ID: 194599.
Published: 2021-08-09T16:05:12.746Z
Updated: 2024-09-16T20:58:28.442Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4031 vulnerable 2026-06-08 05:13:56.677253 Details available
HIGH (8.4)
IBM Workload Scheduler Distributed 9.2, 9.3, 9.4, and 9.5 contains a vulnerability that could allow a local user to write files as root in the file system, which could allow the attacker to gain root privileges. IBM X-Force ID: 155997.
Published: 2019-10-16T12:45:17.911Z
Updated: 2024-09-17T03:32:52.305Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.