CVE-2014-3051

no score yetEPSS 0.6%

The Internet Service Monitor (ISM) agent in IBM Tivoli Composite Application Manager (ITCAM) for Transactions 7.1 and 7.2 before 7.2.0.3 IF28, 7.3 before 7.3.0.1 IF30, and 7.4 before 7.4.0.0 IF18 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain credential information via a crafted certificate.

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWE: CWE-310
Published: 2014-10-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:tivoli_composite_application_manager_for_transactions

References

http://secunia.com/advisories/59756
http://www-01.ibm.com/support/docview.wss?uid=swg21682290
https://exchange.xforce.ibmcloud.com/vulnerabilities/93444
http://secunia.com/advisories/59756
http://www-01.ibm.com/support/docview.wss?uid=swg21682290

Check your stack JSON