BP
Product
BigFix Platform
44
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 11Medium 24Low 5
Watch
Add BigFix Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-6082 | 10.0 | Feb 1 | IBM BigFix Platform could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free race condition Affected: 9.0; 9.1; 9.2; 9.5 |
| CVE-2019-4013 | 9.9 | Apr 10 | IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root privileges Affected: 9.5.0 through 9.5.11 |
| CVE-2018-1475 | 9.8 | Apr 27 | IBM BigFix Platform 9.2 and 9.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials Affected: 9.2 through 9.2.13; 9.5 through 9.5.8 |
| CVE-2017-1221 | 9.8 | Nov 13 | IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user… Affected: 9.2; 9.5 |
Showing 4
