Tivoli Workload Scheduler vulnerabilities

2 known vulnerabilities in Tivoli Workload Scheduler from IBM. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Tivoli Workload Scheduler: Improper Restriction of XML External Entity Reference

  CVE-2022-38389Feb 3, 2023IBMEPSS 1.32%

  IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Forc

• 9.1 Critical severity

  Tivoli Workload Scheduler: Improper Restriction of XML External Entity Reference

  CVE-2022-22486Feb 3, 2023IBMEPSS 1.4%

  IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Forc