Login Request a demo
BP
Product
BigFix Platform
by IBM · last CVE May 20, 2019
44
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities44In the news0Timeline
Severity mix
Critical 4High 11Medium 24Low 5
Severity
All severities44Critical4High11Medium24Low5
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add BigFix Platform to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-1484
3.7
1%
Dec 12
IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the secure attribute on authorization tokens or session cookies
Affected: 9.2.0 through 9.2.14; 9.5 through 9.5.9
CVE-2017-1228
3.7
1%
Oct 26
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable the secure…
Affected: 9.2; 9.5
CVE-2016-0297
3.7
1%
Feb 1
IBM Tivoli Endpoint Manager - Mobile Device Management (MDM) could allow a remote attacker to obtain sensitive information due to a missing HTTP Strict-Transport-Security Header…
Affected: 9.0; 9.1; 9.2; 9.5
CVE-2018-2005
3.3
0%
May 20
IBM BigFix Platform 9.2 and 9.5 stores potentially sensitive information in process memory that could be read by a local attacker with elevated permissions
Affected: 9.2 through 9.2.17; 9.5 through 9.5.12
CVE-2016-0296
3.3
0%
Feb 1
IBM Tivoli Endpoint Manager - Mobile Device Management (MDM) stores potentially sensitive information in log files that could be available to a local user
Affected: 9.0; 9.1; 9.2; 9.5
Showing 5