CVE-2025-3356: tivoli monitoring 6.3.0.7; +1 more affected products

Affected technology

tivoli monitoring · 6.3.0.7
ibm

tivoli monitoring · 6.3.0.7 · update sp1
ibm

tivoli monitoring · 6.3.0.7 · update sp10
ibm

tivoli monitoring · 6.3.0.7 · update sp11
ibm

tivoli monitoring · 6.3.0.7 · update sp12
ibm

tivoli monitoring · 6.3.0.7 · update sp13
ibm

tivoli monitoring · 6.3.0.7 · update sp14
ibm

tivoli monitoring · 6.3.0.7 · update sp15
ibm

tivoli monitoring · 6.3.0.7 · update sp16
ibm

tivoli monitoring · 6.3.0.7 · update sp17
ibm

tivoli monitoring · 6.3.0.7 · update sp18
ibm

tivoli monitoring · 6.3.0.7 · update sp19
ibm

tivoli monitoring · 6.3.0.7 · update sp2
ibm

tivoli monitoring · 6.3.0.7 · update sp20
ibm

tivoli monitoring · 6.3.0.7 · update sp21
ibm

tivoli monitoring · 6.3.0.7 · update sp3
ibm

tivoli monitoring · 6.3.0.7 · update sp4
ibm

tivoli monitoring · 6.3.0.7 · update sp5
ibm

tivoli monitoring · 6.3.0.7 · update sp6
ibm

tivoli monitoring · 6.3.0.7 · update sp7
ibm

tivoli monitoring · 6.3.0.7 · update sp8
ibm

tivoli monitoring · 6.3.0.7 · update sp9
ibm

Tivoli Monitoring · 6.3.0.7 through 6.3.0.7 Service Pack 21
IBM

Description’s affected range: through 6.3.0.7 Service Pack 21 could

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

A remote attacker could traverse directories on the system. Vendor/CNA’s CVSS 3.1 assessment (base score 8.6/10) rates confidentiality and integrity impact as low; availability impact as high. NVD’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high.