BP
Product
BigFix Platform
44
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 11Medium 24Low 5
Watch
Add BigFix Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1479 | 8.8 | Apr 27 | IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user… Affected: 9.2 through 9.2.13; 9.5 through 9.5.8 |
| CVE-2016-0295 | 8.8 | Feb 28 | Cross-site request forgery (CSRF) vulnerability in the IBM BigFix Platform 9.0, 9.1, 9.2, and 9.5 before 9.5.2 allows remote attackers to hijack the authentication of arbitrary… Affected: 9.5 before 9.5.2; 9.0; 9.1; 9.2 |
| CVE-2016-0291 | 8.8 | Feb 28 | IBM BigFix Platform 9.0, 9.1 before 9.1.8, and 9.2 before 9.2.8 allow remote authenticated users to execute arbitrary commands by leveraging report server access Affected: 9.1 before 9.1.8; 9.2 before 9.2.8; 9.0 |
| CVE-2017-1218 | 8.8 | Jul 19 | IBM Tivoli Endpoint Manager is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that… Affected: 9.2.6; 9.2.7; 9.5; 9.5.5; 9.5.6 |
| CVE-2016-0396 | 8.1 | Feb 1 | IBM Tivoli Endpoint Manager could allow a user under special circumstances to inject commands that would be executed with unnecessary higher privileges than expected Affected: 9.0; 9.1; 9.2; 9.5 |
| CVE-2017-1231 | 7.8 | Oct 12 | IBM BigFix Platform 9.5 - 9.5.9 stores user credentials in plain in clear text which can be read by a local user Affected: 9.5 through 9.5.9 |
| CVE-2016-0214 | 7.8 | Feb 8 | IBM Tivoli Endpoint Manager could allow a remote attacker to upload arbitrary files Affected: 9.0; 9.1; 9.2; 9.5 |
| CVE-2018-1476 | 7.5 | Dec 12 | IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 discloses sensitive information to unauthorized users Affected: 9.2 through 9.2.14; 9.5 through 9.5.9 |
| CVE-2018-1600 | 7.5 | Jun 4 | IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a communication channel that can be sniffed by unauthorized actors Affected: 9.2 through 9.2.13; 9.5 through 9.5.8 |
| CVE-2017-1227 | 7.5 | Jul 31 | IBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash the system Affected: 9.1; 9.2; 9.5 |
| CVE-2017-1224 | 7.5 | Jul 19 | IBM Tivoli Endpoint Manager uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 9.2.6; 9.2.7; 9.5; 9.5.5; 9.5.6 |
Showing 11