Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ibm bigfix 9.5 vulnerabilities and exploits
(subscribe to this query)
516
VMScore
CVE-2017-1223
IBM Tivoli Endpoint Manager could allow a remote malicious user to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a us...
Ibm Bigfix Platform 9.2.7
Ibm Bigfix Platform 9.5.5
Ibm Bigfix Platform 9.5.6
Ibm Bigfix Platform 9.2.6
Ibm Bigfix Platform 9.5
445
VMScore
CVE-2017-1224
IBM Tivoli Endpoint Manager uses weaker than expected cryptographic algorithms that could allow an malicious user to decrypt highly sensitive information. IBM X-Force ID: 123903.
Ibm Bigfix Platform 9.5
Ibm Bigfix Platform 9.5.6
Ibm Bigfix Platform 9.2.6
Ibm Bigfix Platform 9.2.7
Ibm Bigfix Platform 9.5.5
383
VMScore
CVE-2017-1203
IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials di...
Ibm Bigfix Platform 9.5.5
Ibm Bigfix Platform 9.2
Ibm Bigfix Platform 9.2.1
Ibm Bigfix Platform 9.2.6
Ibm Bigfix Platform 9.5
Ibm Bigfix Platform 9.2.2
Ibm Bigfix Platform 9.2.3
Ibm Bigfix Platform 9.2.4
Ibm Bigfix Platform 9.2.5
Ibm Bigfix Platform 9.1.3
Ibm Bigfix Platform 9.1.4
Ibm Bigfix Platform 9.1.5
Ibm Bigfix Platform 9.1.6
Ibm Bigfix Platform 9.5.6
Ibm Bigfix Platform 9.2.0
Ibm Bigfix Platform 9.2.7
Ibm Bigfix Platform 9.1
Ibm Bigfix Platform 9.1.7
605
VMScore
CVE-2016-0295
Cross-site request forgery (CSRF) vulnerability in the IBM BigFix Platform 9.0, 9.1, 9.2, and 9.5 prior to 9.5.2 allows remote malicious users to hijack the authentication of arbitrary users for requests that insert XSS sequences. IBM X-Force ID: 111363.
Ibm Bigfix Platform 9.2
Ibm Bigfix Platform
Ibm Bigfix Platform 9.1
Ibm Bigfix Platform 9.0
187
VMScore
CVE-2017-1231
IBM BigFix Platform 9.5 - 9.5.9 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 123910.
Ibm Bigfix Platform
445
VMScore
CVE-2018-1475
IBM BigFix Platform 9.2 and 9.5 uses an inadequate account lockout setting that could allow a remote malicious user to brute force account credentials. IBM X-Force ID: 140756.
Ibm Bigfix Platform
187
VMScore
CVE-2018-2005
IBM BigFix Platform 9.2 and 9.5 stores potentially sensitive information in process memory that could be read by a local attacker with elevated permissions. IBM X-Force ID: 155007
Ibm Bigfix Platform
445
VMScore
CVE-2018-1600
IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a communication channel that can be sniffed by unauthorized actors. IBM X-Force ID: 143745.
Ibm Bigfix Platform
356
VMScore
CVE-2019-4058
IBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into exposing interface elements and information normally restricted to administrators. IBM X-Force ID: 156570.
Ibm Bigfix Platform
445
VMScore
CVE-2018-1476
IBM BigFix Platform 9.2.0 up to and including 9.2.14 and 9.5 up to and including 9.5.9 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 140757.
Ibm Bigfix Platform
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereference
CVE-2023-52689
CVE-2024-23803
client side
CVE-2023-52696
information disclosure
CVE-2024-35843
CVE-2024-27130
CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
NEXT »