CVE-2016-8998

HIGH

IBM Tivoli Storage Manager Server 7.1 - Code Injection

Title source: llm

Description

IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buffer overflow using a specially crafted SQL query and execute arbitrary code on the server. IBM Reference #: 1998747.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/96443

Patch, Vendor Advisory x_refsource_confirm

http://www.ibm.com/support/docview.wss?uid=swg21998747

Scores

CVSS v3 7.2

EPSS 0.0235

EPSS Percentile 85.1%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-119

Status published

Products (18)

ibm/tivoli_storage_manager 7.1.1

ibm/tivoli_storage_manager 7.1.1.1

ibm/tivoli_storage_manager 7.1.1.2

ibm/tivoli_storage_manager 7.1.1.100

ibm/tivoli_storage_manager 7.1.1.200

ibm/tivoli_storage_manager 7.1.1.300

ibm/tivoli_storage_manager 7.1.3

ibm/tivoli_storage_manager 7.1.3.000

ibm/tivoli_storage_manager 7.1.3.1

ibm/tivoli_storage_manager 7.1.3.2

... and 8 more

Published Feb 24, 2017

Tracked Since Feb 18, 2026