Ibm Bigfix vulnerabilities

• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into... CVE-2019-4058 6.5 MediumMay 20, 2019
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows... CVE-2019-4011 5.4 MediumMay 20, 2019
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 stores potentially sensitive information in process memory that... CVE-2018-2005 3.3 LowMay 20, 2019
• ibm bigfix webui profile management, bigfix webui software distribution +1 more IBM BigFix WebUI Profile Management 6 and Software Distribution 23 is vulnerable to SQL injection... CVE-2019-4012 6.3 MediumApril 15, 2019
• hclsoftware bigfix platform IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on... CVE-2019-4013 Public exploit EPSS 13.0% 9.0 CriticalApril 10, 2019
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather... CVE-2019-4061 EPSS 22.5% 5.3 MediumFebruary 27, 2019
• hclsoftware bigfix compliance IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) is vulnerable to HTML injection. A... CVE-2017-1202 5.4 MediumFebruary 5, 2019
• hclsoftware bigfix compliance IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) does not validate, or incorrectly... CVE-2017-1200 3.7 LowFebruary 5, 2019
• hclsoftware bigfix compliance IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) stores sensitive information in URL... CVE-2017-1198 3.7 LowFebruary 5, 2019
• hclsoftware bigfix compliance IBM BigFix Compliance 1.7 through 1.9.91 discloses sensitive information to unauthorized users.... CVE-2017-1177 5.3 MediumFebruary 5, 2019
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not renew a session variable... CVE-2018-1485 3.1 LowDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the secure attribute... CVE-2018-1484 3.7 LowDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 stores sensitive information in... CVE-2018-1481 3.7 LowDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the 'HttpOnly'... CVE-2018-1480 4.0 MediumDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 could allow a remote attacker to... CVE-2018-1478 6.1 MediumDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 discloses sensitive information to... CVE-2018-1476 5.3 MediumDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 is vulnerable to HTTP response... CVE-2018-1474 6.1 MediumDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.5 - 9.5.9 stores user credentials in plain in clear text which can be read... CVE-2017-1231 4.4 MediumOctober 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a... CVE-2018-1600 8.6 HighJune 4, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site request forgery which could allow an... CVE-2018-1479 8.8 HighApril 27, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 uses an inadequate account lockout setting that could allow a... CVE-2018-1475 9.8 CriticalApril 27, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows... CVE-2018-1473 6.1 MediumApril 27, 2018
• ibm bigfix remote control IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 makes it easier for... CVE-2015-4953 4.8 MediumMarch 29, 2018
• ibm bigfix remote control IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 improperly allows self... CVE-2015-4954 5.9 MediumMarch 27, 2018
• ibm bigfix platform Cross-site request forgery (CSRF) vulnerability in the IBM BigFix Platform 9.0, 9.1, 9.2, and 9.5... CVE-2016-0295 8.8 HighFebruary 28, 2018
• ibm bigfix platform IBM BigFix Platform 9.0, 9.1 before 9.1.8, and 9.2 before 9.2.8 allow remote authenticated users... CVE-2016-0291 8.8 HighFebruary 28, 2018
• hcl software bigfix remote control IBM Remote Control v9 could allow a local user to use the component to replace files to which he... CVE-2017-1233 6.7 MediumJanuary 31, 2018
• ibm bigfix family, bigfix platform +1 more IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) could allow a remote attacker to obtain... CVE-2017-1229 5.9 MediumNovember 13, 2017
• hclsoftware bigfix platform IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have... CVE-2017-1221 9.8 CriticalNovember 13, 2017
• ibm bigfix platform IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications (IBM BigFix... CVE-2017-1521 6.1 MediumOctober 26, 2017
• ibm bigfix platform IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) transmits sensitive or security... CVE-2017-1232 5.9 MediumOctober 26, 2017
• ibm bigfix platform IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) uses insufficiently random numbers... CVE-2017-1230 5.3 MediumOctober 26, 2017
• ibm bigfix platform IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) could allow a remote attacker to... CVE-2017-1228 3.7 LowOctober 26, 2017
• ibm bigfix platform IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) generates an error message in error... CVE-2017-1226 4.3 MediumOctober 26, 2017
• ibm bigfix platform IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) stores sensitive information in URL... CVE-2017-1225 5.3 MediumOctober 26, 2017
• ibm bigfix platform IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) does not perform an authentication... CVE-2017-1222 6.5 MediumOctober 26, 2017
• ibm bigfix platform IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) discloses sensitive information to... CVE-2017-1220 5.3 MediumOctober 26, 2017
• ibm bigfix compliance analytics, bigfix security compliance analytics +1 more IBM BigFix Compliance Analytics 1.9.79 (TEMA SUAv1 SCA SCM) stores user credentials in clear text... CVE-2017-1201 7.8 HighOctober 5, 2017
• hclsoftware bigfix platform IBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash... CVE-2017-1227 7.5 HighJuly 31, 2017
• ibm bigfix family, bigfix platform +1 more IBM Tivoli Endpoint Manager uses weaker than expected cryptographic algorithms that could allow... CVE-2017-1224 7.5 HighJuly 19, 2017
• ibm bigfix family, bigfix platform +1 more IBM Tivoli Endpoint Manager could allow a remote attacker to conduct phishing attacks, using an... CVE-2017-1223 6.1 MediumJuly 19, 2017
• ibm bigfix family, bigfix platform +1 more IBM Tivoli Endpoint Manager is vulnerable to a XML External Entity Injection (XXE) attack when... CVE-2017-1219 6.5 MediumJuly 19, 2017
• ibm bigfix family, bigfix platform +1 more IBM Tivoli Endpoint Manager is vulnerable to cross-site request forgery which could allow an... CVE-2017-1218 8.8 HighJuly 19, 2017
• ibm bigfix family, bigfix platform +1 more IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications is vulnerable... CVE-2017-1203 6.1 MediumJuly 19, 2017
• hcl software bigfix inventory, ibm license metric tool +1 more IBM BigFix Inventory v9 9.2 uses an inadequate account lockout setting that could allow a remote... CVE-2016-8964 9.8 CriticalJuly 13, 2017
• ibm bigfix compliance analytics, bigfix security compliance analytics +1 more IBM BigFix Compliance (TEMA SUAv1 SCA SCM) uses an inadequate account lockout setting that could... CVE-2017-1197 9.8 CriticalJune 15, 2017
• ibm bigfix compliance analytics, bigfix security compliance analytics +1 more IBM BigFix Compliance Analytics 1.9.79 uses weaker than expected cryptographic algorithms that... CVE-2017-1179 5.9 MediumJune 8, 2017
• ibm bigfix security compliance analytics, endpoint manager for security and compliance +1 more IBM BigFix Compliance (TEMA SUAv1 SCA SCM) 1.9.70 does not require that users should have strong... CVE-2017-1196 9.8 CriticalJune 7, 2017
• ibm endpoint manager for security and compliance, bigfix security compliance analytics +1 more IBM Endpoint Manager for Security and Compliance 1.9.70 is vulnerable to cross-site scripting.... CVE-2017-1178 6.1 MediumJune 7, 2017
• hcl software bigfix remote control IBM BigFix Remote Control 9.1.3 could allow a remote attacker to perform actions reserved for an... CVE-2016-2930 7.5 HighMay 3, 2017
• Show olderLoading…