Skip to main content

Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.

Call the 24/7 ScamShield Helpline at 1799 if you are unsure if something is a scam.

Cyber Security Agency of Singapore
  1. Home
  2. Alerts & Advisories
  3. Alerts
  4. Critical Vulnerability in IBM Tivoli Monitoring
Alert

Critical Vulnerability in IBM Tivoli Monitoring

5 June 2025

IBM has released security updates to address a critical vulnerability (CVE-2025-3357) in its Tivoli Monitoring products.

Background

IBM has released security updates to address a critical vulnerability (CVE-2025-3357) in its Tivoli Monitoring products. The vulnerability has a Common Vulnerability Scoring System (CVSSv3.1) score of 9.8 out of 10.

Impact

Successful exploitation of the input validation vulnerability could allow a remote attacker to execute arbitrary code due to improper validation of an index value of a dynamically allocated array.

Affected Products

This vulnerability affects IBM Tivoli Monitoring versions 6.3.0.7 to 6.3.0.7 Service Pack 19.

Mitigation

Users and administrators of affected products are advised to update to the latest versions.

References

https://www.cve.org/CVERecord?id=CVE-2025-3357

https://www.ibm.com/support/pages/security-bulletin-ibm-tivoli-monitoring-affected-insufficient-validation-input-data

https://nvd.nist.gov/vuln/detail/CVE-2025-3357

Back to top