10.0
Critical
CVE-2023-47143 IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 is vulnerable to HTTP header injection,…
Description
IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 270270.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Tivoli Application Dependency Discovery Manager 7.3 | 7.3.0.0 → 7.3.0.10 | No fix stated |
Other CVEs of Tivoli Application Dependency Discovery Manager
The 6 CVEs of Tivoli Application Dependency Discovery Manager →
CVE-2025-23227
IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.11 is vulnerable to stored cross-site…
6.4
Medium
CVE-2023-47142
IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 could allow an attacker on the…
7.5
High
CVE-2023-47144
IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 is vulnerable to cross-site scripting
6.1
Medium
CVE-2018-1675
IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could expose password hashes in stored in system…
6.8
Medium