CVE-2015-5003 Command injection in n/a

What is CVE-2015-5003?

CVE-2015-5003 is a high-severity command injection vulnerability in n/a, published on 3 Jan 2016. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

The portal in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 before FP7 allows remote authenticated users to execute arbitrary commands by leveraging Take Action view authority and providing crafted input.

Weakness: CWE-77

Which versions are affected by CVE-2015-5003?

It affects 1 product.

Products include Ibm Tivoli Monitoring.

How do I fix CVE-2015-5003?

No fix has been published for CVE-2015-5003 yet. Limit exposure of the affected software until one is available.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2015-5003 being exploited?

There is no known exploitation of CVE-2015-5003 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2015-7411 Privilege escalation in n/a Critical 9.9
• CVE-2025-3357 IBM Tivoli Monitoring code execution Critical 9.8
• CVE-2017-1789 Code injection in Tivoli Monitoring V6 Critical 9.8
• CVE-2025-3356 IBM Tivoli Monitoring is vulnerable to unauthenticated file read and write operations High 8.6
• CVE-2014-6141 Privilege escalation in n/a High 8.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-8jq2-x4gm-3p2q.