CVE-2017-1182 Public exploit EPSS 8.5%

IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to execute arbitrary commands on the…

IBM · Tivoli Monitoring V6

Official description · CVE.org

IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to execute arbitrary commands on the system, when default client-server default communications, HTTP, are being used. IBM X-Force ID: 123493.

Breakdown

61.5 / 100

Exploited: Yes, in VulnCheck KEV
Reports: 0
Tactics: 0/15

First seen exploited 4 years after disclosure. Public exploit code (PoC-in-GitHub) appeared 8 years after disclosure.

Disclosed14 Jul 2017day 0
First seen exploitedVulnCheck KEV evidence21 Jan 2021+4 yrs
Public exploit codePoC-in-GitHub10 Mar 2025+8 yrs

techniques

No techniques linked

No ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.

What security researchers reported

Not named in any threat report yet

Also mentioned in 11 community threat pulses (AlienVault OTX)

Weaker evidence

Pulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.

References

3 links, grouped by NVD tag

Exploitation evidence

Not in KEV. CISA has not confirmed exploitation.

ENISA

Not marked exploited. EUVD-2017-10198

Public exploitAdvisories link exploit code.

, 30 Oct 2026

8.5%Top 4.9%

Chance of exploitation in the next 30 days. of scored CVEs (riskier than 95.1%).

No CVSS score published.

Priority factorsFormula

In a KEV cataloglisted in VulnCheck KEV 35.0/35

Recent KEV listingadded 2109 days ago 0.0/10

Known ransomware usenot known 0.0/10

EPSS percentilepercentile 0.9505 19.0/20

Threat reports0 reports 0.0/10

Public exploit code1 PoC-in-GitHub repo 5.0/5

Mentioned in OTX pulses11 pulses 2.5/3

CVSS base scoreno CVSS 0.0/7

End-of-life productsupported or unknown 0.0

Total61.5

Record

Published: 14 Jul 2017
Modified: 16 Sep 2024
: None assigned
Elsewhere: NVD CVE.org JSON

Exploitation timelineExploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.

ATT&CKMITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques

What security researchers reported

Also mentioned in 11 community threat pulses (AlienVault OTX)

References

x_refsource_MISC 1

x_refsource_CONFIRM 1

vdb-entry 1

techniques