IBM Tivoli Common Reporting, IBM Tivoli Monitoring, IBM Tivoli Storage Manager

ソフト名：IBM Tivoli Common Reporting 1.2/1.3/2.1, IBM Tivoli Monitoring 6.1/6.2/6.2.1/6.2.2, IBM Tivoli Storage Manager 6.1/6.2
回避策：アップデートにて対応予定
脆弱性：DoS攻撃, 無限ループ
ソース：https://www.ibm.com/developerworks/mydeveloperworks/groups/service/html/communityview?communityUuid=9caf63c9-15a1-4a03-96b3-8fc700f3a364
http://www-947.ibm.com/support/entry/portal/Overview/Software/Tivoli/Tivoli_Common_Reporting
http://www-01.ibm.com/software/tivoli/products/monitor/
http://www-01.ibm.com/software/tivoli/products/storage-mgr/
http://www.ibm.com/support/docview.wss?uid=swg21468884
http://www.ibm.com/support/docview.wss?uid=swg21469046
http://www.ibm.com/support/docview.wss?uid=swg21469266
http://secunia.com/advisories/43262/
http://secunia.com/advisories/43489/
http://secunia.com/advisories/43509/
http://secunia.com/advisories/43514/
http://dvw-j.blogspot.com/2011/02/sun-java-ibm-java-ibm-websphere.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4476
CVE：CVE-2010-4476
危険性：Medium Risk

IBM Tivoli Common Reporting

ソフト名：IBM Tivoli Common Reporting 1.x
回避策：APAR IY99978, またはアップデートにて対応
脆弱性：未知の危険性, セキュリティ制限の回避, XSS, CSRF, 不正HTMLの実行, スクリプトコード実行
ソース：https://www.ibm.com/developerworks/mydeveloperworks/groups/service/html/communityview?communityUuid=9caf63c9-15a1-4a03-96b3-8fc700f3a364
http://www.ibm.com/support/docview.wss?uid=swg1IY99978
http://secunia.com/advisories/42136/
http://secunia.com/advisories/43030/
危険性：Medium Risk