CVE-2011-4668

EUVD-2011-4586
IBM Tivoli Netcool/Reporter 2.2 before 2.2.0.8 allows remote attackers to execute arbitrary code via vectors related to an unspecified CGI program used with the Apache HTTP Server.
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
Affected Products (NVD)
VendorProductVersion
ibmtivoli_netcool\/reporter
2.2.0:tiv-ncreporter-if0001
ibmtivoli_netcool\/reporter
2.2.0:tiv-ncreporter-if0002
ibmtivoli_netcool\/reporter
2.2.0.1
ibmtivoli_netcool\/reporter
2.2.0.2
ibmtivoli_netcool\/reporter
2.2.0.3
ibmtivoli_netcool\/reporter
2.2.0.4
ibmtivoli_netcool\/reporter
2.2.0.5
ibmtivoli_netcool\/reporter
2.2.0.6
ibmtivoli_netcool\/reporter
2.2.0.7
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/77402
http://secunia.com/advisories/46999
http://www-01.ibm.com/support/docview.wss?uid=swg24031456
http://www.ibm.com/support/docview.wss?uid=swg1IZ94277
http://www.securityfocus.com/bid/50864
https://exchange.xforce.ibmcloud.com/vulnerabilities/71663
http://osvdb.org/77402
http://secunia.com/advisories/46999
http://www-01.ibm.com/support/docview.wss?uid=swg24031456
http://www.ibm.com/support/docview.wss?uid=swg1IZ94277
http://www.securityfocus.com/bid/50864
https://exchange.xforce.ibmcloud.com/vulnerabilities/71663