Tivoli Application Dependency Discovery Manager vulnerabilities

2 known vulnerabilities in Tivoli Application Dependency Discovery Manager from IBM. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Tivoli Application Dependency Discovery Manager: Incorrect Authorization

  CVE-2023-47142Feb 2, 2024IBM

  IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 could allow an attacker on the organization's local network to escalate their privileges due to unauthorized API access. IBM X-Force ID: 270267.

• 9.8 Critical severity

  Tivoli Application Dependency Discovery Manager: Improper Encoding or Escaping of Output

  CVE-2023-47143Feb 2, 2024IBM

  IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable syst