Ibm Bigfix Platform vulnerabilities

• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into... CVE-2019-4058 6.5 MediumMay 20, 2019
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows... CVE-2019-4011 5.4 MediumMay 20, 2019
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 stores potentially sensitive information in process memory that... CVE-2018-2005 3.3 LowMay 20, 2019
• hclsoftware bigfix platform IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on... CVE-2019-4013 Public exploit EPSS 13.0% 9.0 CriticalApril 10, 2019
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather... CVE-2019-4061 EPSS 22.5% 5.3 MediumFebruary 27, 2019
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not renew a session variable... CVE-2018-1485 3.1 LowDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the secure attribute... CVE-2018-1484 3.7 LowDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 stores sensitive information in... CVE-2018-1481 3.7 LowDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the 'HttpOnly'... CVE-2018-1480 4.0 MediumDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 could allow a remote attacker to... CVE-2018-1478 6.1 MediumDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 discloses sensitive information to... CVE-2018-1476 5.3 MediumDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 is vulnerable to HTTP response... CVE-2018-1474 6.1 MediumDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.5 - 9.5.9 stores user credentials in plain in clear text which can be read... CVE-2017-1231 4.4 MediumOctober 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a... CVE-2018-1600 8.6 HighJune 4, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site request forgery which could allow an... CVE-2018-1479 8.8 HighApril 27, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 uses an inadequate account lockout setting that could allow a... CVE-2018-1475 9.8 CriticalApril 27, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows... CVE-2018-1473 6.1 MediumApril 27, 2018
• ibm bigfix platform Cross-site request forgery (CSRF) vulnerability in the IBM BigFix Platform 9.0, 9.1, 9.2, and 9.5... CVE-2016-0295 8.8 HighFebruary 28, 2018
• ibm bigfix platform IBM BigFix Platform 9.0, 9.1 before 9.1.8, and 9.2 before 9.2.8 allow remote authenticated users... CVE-2016-0291 8.8 HighFebruary 28, 2018
• ibm bigfix family, bigfix platform +1 more IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) could allow a remote attacker to obtain... CVE-2017-1229 5.9 MediumNovember 13, 2017
• hclsoftware bigfix platform IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have... CVE-2017-1221 9.8 CriticalNovember 13, 2017
• ibm bigfix platform IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications (IBM BigFix... CVE-2017-1521 6.1 MediumOctober 26, 2017
• ibm bigfix platform IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) transmits sensitive or security... CVE-2017-1232 5.9 MediumOctober 26, 2017
• ibm bigfix platform IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) uses insufficiently random numbers... CVE-2017-1230 5.3 MediumOctober 26, 2017
• ibm bigfix platform IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) could allow a remote attacker to... CVE-2017-1228 3.7 LowOctober 26, 2017
• ibm bigfix platform IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) generates an error message in error... CVE-2017-1226 4.3 MediumOctober 26, 2017
• ibm bigfix platform IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) stores sensitive information in URL... CVE-2017-1225 5.3 MediumOctober 26, 2017
• ibm bigfix platform IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) does not perform an authentication... CVE-2017-1222 6.5 MediumOctober 26, 2017
• ibm bigfix platform IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) discloses sensitive information to... CVE-2017-1220 5.3 MediumOctober 26, 2017
• hclsoftware bigfix platform IBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash... CVE-2017-1227 7.5 HighJuly 31, 2017
• ibm bigfix family, bigfix platform +1 more IBM Tivoli Endpoint Manager uses weaker than expected cryptographic algorithms that could allow... CVE-2017-1224 7.5 HighJuly 19, 2017
• ibm bigfix family, bigfix platform +1 more IBM Tivoli Endpoint Manager could allow a remote attacker to conduct phishing attacks, using an... CVE-2017-1223 6.1 MediumJuly 19, 2017
• ibm bigfix family, bigfix platform +1 more IBM Tivoli Endpoint Manager is vulnerable to a XML External Entity Injection (XXE) attack when... CVE-2017-1219 6.5 MediumJuly 19, 2017
• ibm bigfix family, bigfix platform +1 more IBM Tivoli Endpoint Manager is vulnerable to cross-site request forgery which could allow an... CVE-2017-1218 8.8 HighJuly 19, 2017
• ibm bigfix family, bigfix platform +1 more IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications is vulnerable... CVE-2017-1203 6.1 MediumJuly 19, 2017
• hclsoftware bigfix platform IBM Tivoli Endpoint Manager could allow a remote attacker to upload arbitrary files. A remote... CVE-2016-0214 7.8 HighFebruary 8, 2017
• hclsoftware bigfix platform IBM BigFix Platform could allow an attacker on the local network to crash the BES and relay servers. CVE-2016-6085 6.5 MediumFebruary 1, 2017
• hclsoftware bigfix platform IBM BigFix Platform could allow an attacker on the local network to crash the BES server using a... CVE-2016-6084 6.5 MediumFebruary 1, 2017
• hclsoftware bigfix platform IBM BigFix Platform could allow a remote attacker to execute arbitrary code on the system, caused... CVE-2016-6082 10.0 CriticalFebruary 1, 2017
• hclsoftware bigfix platform IBM Tivoli Endpoint Manager could allow a user under special circumstances to inject commands... CVE-2016-0396 8.1 HighFebruary 1, 2017
• hclsoftware bigfix platform IBM Tivoli Endpoint Manager - Mobile Device Management (MDM) could allow a remote attacker to... CVE-2016-0297 3.7 LowFebruary 1, 2017
• hclsoftware bigfix platform IBM Tivoli Endpoint Manager - Mobile Device Management (MDM) stores potentially sensitive... CVE-2016-0296 3.3 LowFebruary 1, 2017
• ibm bigfix platform Cross-site scripting (XSS) vulnerability in IBM BigFix Platform (formerly Tivoli Endpoint Manager... CVE-2016-0293 6.1 MediumSeptember 1, 2016
• ibm bigfix platform Cross-site scripting (XSS) vulnerability in IBM BigFix Platform 9.x before 9.1.8 and 9.2.x before... CVE-2016-0269 5.4 MediumJuly 15, 2016