Ibm Bigfix Platform vulnerabilities

• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into... CVE-2019-4058 6.5 MediumMay 20, 2019
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows... CVE-2019-4011 5.4 MediumMay 20, 2019
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 stores potentially sensitive information in process memory that... CVE-2018-2005 3.3 LowMay 20, 2019
• hclsoftware bigfix platform IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on... CVE-2019-4013 Public exploit EPSS 13.0% 9.0 CriticalApril 10, 2019
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather... CVE-2019-4061 EPSS 22.5% 5.3 MediumFebruary 27, 2019
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not renew a session variable... CVE-2018-1485 3.1 LowDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the secure attribute... CVE-2018-1484 3.7 LowDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 stores sensitive information in... CVE-2018-1481 3.7 LowDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the 'HttpOnly'... CVE-2018-1480 4.0 MediumDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 could allow a remote attacker to... CVE-2018-1478 6.1 MediumDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 discloses sensitive information to... CVE-2018-1476 5.3 MediumDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 is vulnerable to HTTP response... CVE-2018-1474 6.1 MediumDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.5 - 9.5.9 stores user credentials in plain in clear text which can be read... CVE-2017-1231 4.4 MediumOctober 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a... CVE-2018-1600 8.6 HighJune 4, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site request forgery which could allow an... CVE-2018-1479 8.8 HighApril 27, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 uses an inadequate account lockout setting that could allow a... CVE-2018-1475 9.8 CriticalApril 27, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows... CVE-2018-1473 6.1 MediumApril 27, 2018
• hclsoftware bigfix platform IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have... CVE-2017-1221 9.8 CriticalNovember 13, 2017
• hclsoftware bigfix platform IBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash... CVE-2017-1227 7.5 HighJuly 31, 2017