Latest vulnerabilities for "ibm bigfix platform" 9.5

5.4

First published (updated )

CVE-2019-4011

IBM BigFix PlatformIBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into exposing …

6.5

First published (updated )

CVE-2019-4058

IBM BigFix PlatformInfoleak

5.3

First published (updated )

CVE-2019-4061

IBM BigFix PlatformIBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the 'HttpOnly' attribute…

5.3

First published (updated )

CVE-2018-1480

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

IBM BigFix PlatformIBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not renew a session variable aft…

4.3

First published (updated )

CVE-2018-1485

IBM BigFix PlatformIBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 is vulnerable to HTTP response splitt…

6.1

First published (updated )

CVE-2018-1474

IBM BigFix PlatformInfoleak

7.5

First published (updated )

CVE-2018-1476

IBM BigFix PlatformInfoleak

5.3

First published (updated )

CVE-2018-1481

IBM BigFix PlatformInput Validation

6.1

First published (updated )

CVE-2018-1478

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

IBM BigFix PlatformIBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the secure attribute on …

4.3

First published (updated )

CVE-2018-1484

IBM BigFix PlatformIBM BigFix Platform 9.5 - 9.5.9 stores user credentials in plain in clear text which can be read by …

7.8

First published (updated )

CVE-2017-1231

IBM BigFix PlatformIBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a com…

8.6

First published (updated )

CVE-2018-1600

IBM BigFix PlatformIBM BigFix Platform 9.2 and 9.5 uses an inadequate account lockout setting that could allow a remote…

critical

9.8

First published (updated )

CVE-2018-1475

IBM BigFix PlatformXSS

6.1

First published (updated )

CVE-2018-1473

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

IBM BigFix PlatformCSRF

8.8

First published (updated )

CVE-2018-1479

IBM BigFix PlatformCSRF, XSS

8.8

First published (updated )

CVE-2016-0295

IBM BigFix PlatformInfoleak

5.9

First published (updated )

CVE-2017-1229

IBM BigFix PlatformIBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong …

critical

9.8

First published (updated )

CVE-2017-1221

IBM BigFix PlatformInfoleak

5.3

First published (updated )

CVE-2017-1225

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

IBM BigFix PlatformIBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) does not perform an authentication che…

6.5

First published (updated )

CVE-2017-1222

IBM BigFix PlatformInfoleak

4.3

First published (updated )

CVE-2017-1226

IBM BigFix PlatformInfoleak

5.3

First published (updated )

CVE-2017-1220

IBM BigFix PlatformIBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) transmits sensitive or security-critic…

5.9

First published (updated )

CVE-2017-1232

IBM BigFix PlatformInfoleak

5.3

First published (updated )

CVE-2017-1230

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

IBM BigFix PlatformInfoleak

4.3

First published (updated )

CVE-2017-1228

IBM BigFix PlatformXSS

6.1

First published (updated )

CVE-2017-1521

IBM BigFix PlatformIBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash the s…

7.8

First published (updated )

CVE-2017-1227

IBM BigFix PlatformWeak Encryption

7.5

First published (updated )

CVE-2017-1224

IBM BigFix PlatformXSS

6.1

First published (updated )

CVE-2017-1203

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

IBM BigFix PlatformIBM Tivoli Endpoint Manager could allow a remote attacker to conduct phishing attacks, using an open…

6.1

First published (updated )

CVE-2017-1223

IBM BigFix PlatformCSRF

8.8

First published (updated )

CVE-2017-1218

IBM BigFix PlatformIBM Tivoli Endpoint Manager could allow a remote attacker to upload arbitrary files. A remote attack…

7.8

First published (updated )

CVE-2016-0214

IBM BigFix PlatformUse After Free, Race Condition

critical

10

First published (updated )

CVE-2016-6082

IBM BigFix PlatformIBM BigFix Platform could allow an attacker on the local network to crash the BES and relay servers.

6.5

First published (updated )

CVE-2016-6085

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

IBM BigFix PlatformCommand Injection

8.1

First published (updated )

CVE-2016-0396

IBM BigFix PlatformIBM Tivoli Endpoint Manager - Mobile Device Management (MDM) stores potentially sensitive informatio…

low

3.3

First published (updated )

CVE-2016-0296

IBM BigFix PlatformInfoleak