IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a local attacker to execute arbitrary code due to a buffer overflow.
IBM SevOne Network Performance Management has previously remediated the vulnerabilities listed in this bulletin through product maintenance and updates.
This security bulletin is being published as a historical reference to align with current security disclosure practices and does not contain new findings.
IBM strongly recommends addressing these vulnerabilities now by upgrading. Please refer to the instructions below for installation steps for your specific version.
Product(s)
Latest Version(s)
Remediation/Fix/InstructionsIBM SevOne Network Performance Management (DI)8.2.4 Download https://www.ibm.com/support/fixcentral/quickorder and refer to the release notes https://www.ibm.com/docs/en/sevone-npm/8.2.0 IBM SevOne Network Performance Management (NMS)8.2.3 Download https://www.ibm.com/support/fixcentral/swg/selectFixes and refer to the release notes https://www.ibm.com/docs/en/sevone-npm/8.2.0 IBM SevOne Network Performance Management (SD-WAN)8.2.3 Download https://www.ibm.com/support/fixcentral/swg/selectFixes and refer to the release notes https://www.ibm.com/docs/en/sevone-npm/8.2.0