CVE-2025-3320

IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.1 HIGH
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
ibmCNA
8.1 HIGH
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 46%
VendorProductVersion
ibmtivoli_monitoring
6.3.0.7
ibmtivoli_monitoring
6.3.0.7:sp1
ibmtivoli_monitoring
6.3.0.7:sp10
ibmtivoli_monitoring
6.3.0.7:sp11
ibmtivoli_monitoring
6.3.0.7:sp12
ibmtivoli_monitoring
6.3.0.7:sp13
ibmtivoli_monitoring
6.3.0.7:sp14
ibmtivoli_monitoring
6.3.0.7:sp15
ibmtivoli_monitoring
6.3.0.7:sp16
ibmtivoli_monitoring
6.3.0.7:sp17
ibmtivoli_monitoring
6.3.0.7:sp18
ibmtivoli_monitoring
6.3.0.7:sp19
ibmtivoli_monitoring
6.3.0.7:sp2
ibmtivoli_monitoring
6.3.0.7:sp20
ibmtivoli_monitoring
6.3.0.7:sp3
ibmtivoli_monitoring
6.3.0.7:sp4
ibmtivoli_monitoring
6.3.0.7:sp5
ibmtivoli_monitoring
6.3.0.7:sp6
ibmtivoli_monitoring
6.3.0.7:sp7
ibmtivoli_monitoring
6.3.0.7:sp8
ibmtivoli_monitoring
6.3.0.7:sp9
𝑥
= Vulnerable software versions