CVE-2025-3354

ibm tivoli monitoring

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2025-3354

Katalog CVE

CVSS 9.8 · Critical EPSS 0,50%

Kerentanan Heap-based Buffer Overflow pada ibm tivoli monitoring. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash.

Rincian

Terbit di NVD
6 Agustus 2025
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-122: Heap-based Buffer Overflow
EPSS (30 hari)
0,50% peluang dieksploitasi; lebih tinggi dari 41,3% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
ibm tivoli monitoring Versi 6.3.0.7
ibm tivoli monitoring Versi 6.3.0.7 sp1
ibm tivoli monitoring Versi 6.3.0.7 sp10
ibm tivoli monitoring Versi 6.3.0.7 sp11
ibm tivoli monitoring Versi 6.3.0.7 sp12
ibm tivoli monitoring Versi 6.3.0.7 sp13
ibm tivoli monitoring Versi 6.3.0.7 sp14
ibm tivoli monitoring Versi 6.3.0.7 sp15
ibm tivoli monitoring Versi 6.3.0.7 sp16
ibm tivoli monitoring Versi 6.3.0.7 sp17
ibm tivoli monitoring Versi 6.3.0.7 sp18
ibm tivoli monitoring Versi 6.3.0.7 sp19
ibm tivoli monitoring Versi 6.3.0.7 sp2
ibm tivoli monitoring Versi 6.3.0.7 sp20
ibm tivoli monitoring Versi 6.3.0.7 sp3
ibm tivoli monitoring Versi 6.3.0.7 sp4
ibm tivoli monitoring Versi 6.3.0.7 sp5
ibm tivoli monitoring Versi 6.3.0.7 sp6
ibm tivoli monitoring Versi 6.3.0.7 sp7
ibm tivoli monitoring Versi 6.3.0.7 sp8
ibm tivoli monitoring Versi 6.3.0.7 sp9

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.