Filtered by vendor Ibm Subscriptions
Filtered by product Tivoli Workload Scheduler Subscriptions
Total 8 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-49351 1 Ibm 1 Tivoli Workload Scheduler 2024-11-26 5.5 Medium
IBM Workload Scheduler 9.5, 10.1, and 10.2 stores user credentials in plain text which can be read by a local user.
CVE-2022-38389 1 Ibm 1 Tivoli Workload Scheduler 2024-11-21 7.1 High
IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 233975.
CVE-2022-22486 1 Ibm 1 Tivoli Workload Scheduler 2024-11-21 10 Critical
IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226328.
CVE-2021-20349 1 Ibm 1 Tivoli Workload Scheduler 2024-11-21 5.3 Medium
IBM Tivoli Workload Scheduler 9.4 and 9.5 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and gain lower level privileges. IBM X-Force ID: 194599.
CVE-2019-4608 1 Ibm 1 Tivoli Workload Scheduler 2024-11-21 5.4 Medium
IBM Tivoli Workload Scheduler 9.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 168508.
CVE-2019-4031 1 Ibm 1 Tivoli Workload Scheduler 2024-11-21 7.8 High
IBM Workload Scheduler Distributed 9.2, 9.3, 9.4, and 9.5 contains a vulnerability that could allow a local user to write files as root in the file system, which could allow the attacker to gain root privileges. IBM X-Force ID: 155997.
CVE-2018-1386 1 Ibm 1 Tivoli Workload Scheduler 2024-11-21 7.8 High
IBM Tivoli Workload Automation for AIX (IBM Workload Scheduler 8.6, 9.1, 9.2, 9.3, and 9.4) contains directories with improper permissions that could allow a local user to with special access to gain root privileges. IBM X-Force ID: 138208.
CVE-2017-1716 1 Ibm 1 Tivoli Workload Scheduler 2024-11-21 N/A
IBM Tivoli Workload Scheduler 8.6.0, 9.1.0, and 9.2.0 could disclose sensitive information to a local attacker due to improper permission settings. IBM X-Force ID: 134638.