Optim Performance Manager

optim_performance_manager

Vendor: Ibm • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-6154 1Ibm 1Optim Performance Manager May 6, 2026 Feb 13, 2015 N/A· v4 N/A· v3 7.8 HIGH· v2 Directory traversal vulnerability in IBM Optim Performance Manager for DB2 4.1.0.1 through 4.1.1 on Linux, UNIX, and Windows and IBM InfoSphere Optim Performance Manager for DB2 5.1 through 5.3.1 on Linux, UNIX, and Wind...Show more Directory traversal vulnerability in IBM Optim Performance Manager for DB2 4.1.0.1 through 4.1.1 on Linux, UNIX, and Windows and IBM InfoSphere Optim Performance Manager for DB2 5.1 through 5.3.1 on Linux, UNIX, and Windows allows remote attackers to access arbitrary files via a .. (dot dot) in a URL.Show less
CVE-2013-4025 1Ibm 4Data Studio Web Console Db2 Recovery ExpertInfosphere Optim Configuration Manager+1 more Apr 29, 2026 Sep 25, 2013 N/A· v4 N/A· v3 1.9 LOW· v2 IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x do not have an off autocomplete attribute for the l...Show more IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x do not have an off autocomplete attribute for the login-password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.Show less
CVE-2013-4024 1Ibm 4Data Studio Web Console Db2 Recovery ExpertInfosphere Optim Configuration Manager+1 more Apr 29, 2026 Sep 25, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x support HTTP access to the Web Console, which allow...Show more IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x support HTTP access to the Web Console, which allows remote attackers to read session cookies by sniffing the network.Show less
CVE-2013-4022 1Ibm 4Data Studio Web Console Db2 Recovery ExpertInfosphere Optim Configuration Manager+1 more Apr 29, 2026 Sep 25, 2013 N/A· v4 N/A· v3 3.5 LOW· v2 IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x store unspecified authentication information in a c...Show more IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x store unspecified authentication information in a cookie, which allows remote authenticated users to bypass intended access restrictions via unknown vectors.Show less
CVE-2013-2979 1Ibm 2Infosphere Optim Performance Manager Optim Performance Manager Apr 29, 2026 Aug 22, 2013 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Directory traversal vulnerability in IBM Optim Performance Manager 4.1.1 and IBM InfoSphere Optim Performance Manager 5.x before 5.2 allows remote authenticated users to read arbitrary files via a crafted URL.