CVE-2013-3018: The AXIS webapp in deploy-tomcat/axis in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2...

Security readout for executives and security teams

This CVE describes an IBM TADDM information disclosure issue. A remotely reachable AXIS web application could expose sensitive configuration information through a direct request, with happyaxis.jsp cited as an example. The bundle does not provide CVSS scoring or confirmed active exploitation evidence. Exposure is most likely where affected IBM TADDM versions have the deploy-tomcat/axis web application reachable from untrusted networks or broad internal networks. Public internet exposure would increase urgency because the described access path is remote. Treat this as a targeted exposure-reduction item, especially for externally reachable or broadly accessible internal TADDM servers. It is not KEV-listed, but configuration disclosure can assist follow-on attacks against infrastructure management systems. Mitigation focus: Check IBM advisory swg21672403 for official fix or configuration guidance.; Inventory TADDM deployments and identify affected version ranges.; Restrict network access to TADDM and AXIS endpoints to trusted administrators..

Prepared

Jun 7, 2026, 13:21 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.