CVE-2025-3357

Name of the Vulnerable Software and Affected Versions IBM Tivoli Monitoring versions 6.3.0.7 through 6.3.0.7 Service Pack 19

Description The issue allows a remote attacker to execute arbitrary code due to improper validation of an index value of a dynamically allocated array. This can be exploited without authentication.

Recommendations For versions 6.3.0.7 through 6.3.0.7 Service Pack 19, update to Service Pack 20 to resolve the issue. As a temporary workaround, consider restricting access to the affected system until the patch is applied.