IBM Tivoli Network Manager Critical Vulnerabilities CVSS 9.8

CERT-Bund issued a security advisory disclosing multiple critical vulnerabilities in IBM Tivoli Network Manager IP Edition prior to version 4.2.0.24. The vulnerabilities, with CVSS Base Score 9.8 and Temporal Score 8.5, affect all supported operating systems (Linux, UNIX, Windows) and enable remote attackers to execute arbitrary code, conduct denial of service attacks, disclose sensitive information, and circumvent security controls.

Organizations using IBM Tivoli Network Manager should immediately identify affected installations and apply available patches or mitigations. Given the critical severity and remote attack vector, unpatched instances pose significant risk of compromise and should be prioritized for remediation. The software is used for Layer-2 and Layer-3 network data collection and distribution in complex network environments.