Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ibm bigfix platform vulnerabilities and exploits
(subscribe to this query)
5.8
CVSSv2
CVE-2017-1223
IBM Tivoli Endpoint Manager could allow a remote malicious user to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a us...
Ibm Bigfix Platform 9.5.5
Ibm Bigfix Platform 9.2.7
Ibm Bigfix Platform 9.5.6
Ibm Bigfix Platform 9.5
Ibm Bigfix Platform 9.2.6
5.5
CVSSv2
CVE-2017-1219
IBM Tivoli Endpoint Manager is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 123859.
Ibm Bigfix Platform 9.2
Ibm Bigfix Platform 9.2.4
Ibm Bigfix Platform 9.2.0
Ibm Bigfix Platform 9.1
Ibm Bigfix Platform 9.2.7
Ibm Bigfix Platform 9.2.1
Ibm Bigfix Platform 9.1.3
Ibm Bigfix Platform 9.1.5
Ibm Bigfix Platform 9.2.2
Ibm Bigfix Platform 9.1.4
Ibm Bigfix Platform 9.2.5
Ibm Bigfix Platform 9.1.7
Ibm Bigfix Platform 9.1.6
Ibm Bigfix Platform 9.2.3
Ibm Bigfix Platform 9.2.6
5
CVSSv2
CVE-2019-4061
IBM BigFix Platform 9.2 and 9.5 could allow an malicious user to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869.
Ibm Bigfix Platform
5
CVSSv2
CVE-2018-1476
IBM BigFix Platform 9.2.0 up to and including 9.2.14 and 9.5 up to and including 9.5.9 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 140757.
Ibm Bigfix Platform
5
CVSSv2
CVE-2018-1481
IBM BigFix Platform 9.2.0 up to and including 9.2.14 and 9.5 up to and including 9.5.9 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM ...
Ibm Bigfix Platform
5
CVSSv2
CVE-2018-1480
IBM BigFix Platform 9.2.0 up to and including 9.2.14 and 9.5 up to and including 9.5.9 does not set the 'HttpOnly' attribute on authorization tokens or session cookies. If a Cross-Site Scripting vulnerability also existed attackers may be able to get the cookie values v...
Ibm Bigfix Platform
5
CVSSv2
CVE-2018-1600
IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a communication channel that can be sniffed by unauthorized actors. IBM X-Force ID: 143745.
Ibm Bigfix Platform
5
CVSSv2
CVE-2018-1475
IBM BigFix Platform 9.2 and 9.5 uses an inadequate account lockout setting that could allow a remote malicious user to brute force account credentials. IBM X-Force ID: 140756.
Ibm Bigfix Platform
5
CVSSv2
CVE-2017-1221
IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default, which makes it easier for malicious users to compromise user accounts. IBM X-Force ID: 123861.
Ibm Bigfix Platform 9.2
Ibm Bigfix Platform 9.5
5
CVSSv2
CVE-2017-1225
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904.
Ibm Bigfix Platform 9.2
Ibm Bigfix Platform 9.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29824
CVE-2024-30095
CVE-2024-30104
client side
CVE-2024-5840
CVE-2024-34405
unprivileged
wireless
CVE-2024-4577
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
NEXT »