Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ibm bigfix platform 9.2 vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2017-1220
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 123860.
Ibm Bigfix Platform 9.2
Ibm Bigfix Platform 9.5
5
CVSSv2
CVE-2017-1221
IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default, which makes it easier for malicious users to compromise user accounts. IBM X-Force ID: 123861.
Ibm Bigfix Platform 9.2
Ibm Bigfix Platform 9.5
6.4
CVSSv2
CVE-2017-1222
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 123862.
Ibm Bigfix Platform 9.2
Ibm Bigfix Platform 9.5
1 Github repository
5
CVSSv2
CVE-2017-1225
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904.
Ibm Bigfix Platform 9.2
Ibm Bigfix Platform 9.5
4
CVSSv2
CVE-2017-1226
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) generates an error message in error logs that includes sensitive information about its environment which could be used in further attacks against the system. IBM X-Force ID: 123905.
Ibm Bigfix Platform 9.2
Ibm Bigfix Platform 9.5
4.3
CVSSv2
CVE-2017-1232
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. IBM X-Force ID: 123911.
Ibm Bigfix Platform 9.2
Ibm Bigfix Platform 9.5
4.3
CVSSv2
CVE-2017-1229
IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) could allow a remote malicious user to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using ma...
Ibm Bigfix Platform 9.2
Ibm Bigfix Platform 9.5
4.3
CVSSv2
CVE-2017-1228
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) could allow a remote malicious user to obtain sensitive information, caused by the failure to properly enable the secure cookie attribute. An attacker could exploit this vulnerability to obtain sensitive information us...
Ibm Bigfix Platform 9.2
Ibm Bigfix Platform 9.5
5.5
CVSSv2
CVE-2017-1219
IBM Tivoli Endpoint Manager is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 123859.
Ibm Bigfix Platform 9.2
Ibm Bigfix Platform 9.2.4
Ibm Bigfix Platform 9.2.0
Ibm Bigfix Platform 9.1
Ibm Bigfix Platform 9.2.7
Ibm Bigfix Platform 9.2.1
Ibm Bigfix Platform 9.1.3
Ibm Bigfix Platform 9.1.5
Ibm Bigfix Platform 9.2.2
Ibm Bigfix Platform 9.1.4
Ibm Bigfix Platform 9.2.5
Ibm Bigfix Platform 9.1.7
Ibm Bigfix Platform 9.1.6
Ibm Bigfix Platform 9.2.3
Ibm Bigfix Platform 9.2.6
4.3
CVSSv2
CVE-2017-1203
IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials di...
Ibm Bigfix Platform 9.5.5
Ibm Bigfix Platform 9.2
Ibm Bigfix Platform 9.2.4
Ibm Bigfix Platform 9.2.0
Ibm Bigfix Platform 9.1
Ibm Bigfix Platform 9.2.7
Ibm Bigfix Platform 9.2.1
Ibm Bigfix Platform 9.1.3
Ibm Bigfix Platform 9.1.5
Ibm Bigfix Platform 9.2.2
Ibm Bigfix Platform 9.5.6
Ibm Bigfix Platform 9.1.4
Ibm Bigfix Platform 9.2.5
Ibm Bigfix Platform 9.1.7
Ibm Bigfix Platform 9.5
Ibm Bigfix Platform 9.1.6
Ibm Bigfix Platform 9.2.3
Ibm Bigfix Platform 9.2.6
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
buffer overflow
type confusion
server-side request forgery
CVE-2024-38440
CVE-2024-27801
CVE-2024-5868
CVE-2024-0582
CVE-2024-37643
CVE-2024-3105
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
NEXT »