CVE-2017-1182

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to execute arbitrary commands on the system, when default client-server default communications, HTTP, are being used. IBM X-Force ID: 123493.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
IBM	Tivoli Monitoring V6	6.2.3.5; 6.2.2.9; 6.3.0.7

References

http://www.ibm.com/support/docview.wss?uid=swg22003402Patch, Vendor Advisory
http://www.securitytracker.com/id/1038913Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/123493VDB Entry, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22003402Patch, Vendor Advisory
http://www.securitytracker.com/id/1038913Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/123493VDB Entry, Vendor Advisory

Timeline

Published: Jul 17, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-118205.4Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site sc CVE-2017-118217.5ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, CVE-2017-118227.5Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2 CVE-2017-118236.7The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by t CVE-2017-118247.0The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R CVE-2017-118257.8Microsoft Office 2016 Click-to-Run (C2R) and Microsoft Office 2016 for Mac allow an attacker to use a specially crafted file to perform acti CVE-2017-118267.8Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Wo CVE-2017-118277.5Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Mi CVE-2017-118295.5Microsoft Windows 10 allows an elevation of privilege vulnerability when the Windows Update Delivery Optimization does not properly enforce CVE-2017-11837.5IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to modify SQL commands to the Portal Server, when default cl CVE-2017-118305.3Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to mak CVE-2017-118314.7Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 15