BR
Product
Bigfix Remote Control
23
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 13Low 4
Watch
Add Bigfix Remote Control to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-2933 | 6.8 | Nov 30 | Directory traversal vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated administrators to read arbitrary files via a crafted request Affected: through 9.1.2 |
| CVE-2017-1233 | 6.7 | Jan 31 | IBM Remote Control v9 could allow a local user to use the component to replace files to which he does not have write access and which he can cause to be executed with Local System… Affected: 9.1.4 |
| CVE-2016-2950 | 6.5 | Nov 30 | SQL injection vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors Affected: through 9.1.2 |
| CVE-2016-2937 | 6.5 | Nov 30 | IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive information or spoof e-mail transmission via a crafted POST request, related to an "untrusted… Affected: through 9.1.2 |
| CVE-2016-2934 | 6.1 | Nov 30 | Cross-site scripting (XSS) vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors Affected: through 9.1.2 |
| CVE-2015-4954 | 5.9 | Mar 27 | IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 improperly allows self-signed certificates, which might allow remote attackers to conduct spoofing… Affected: 9.1.2 |
| CVE-2016-2927 | 5.9 | Nov 25 | IBM BigFix Remote Control before 9.1.3 does not properly restrict the set of available encryption algorithms, which makes it easier for remote attackers to defeat cryptographic… Affected: through 9.1.2 |
| CVE-2016-2940 | 5.3 | Nov 30 | Multiple unspecified vulnerabilities in IBM BigFix Remote Control before 9.1.3 allow remote attackers to obtain sensitive information via unknown vectors Affected: through 9.1.2 |
| CVE-2016-2935 | 5.3 | Nov 30 | The broker application in IBM BigFix Remote Control before 9.1.3 allows remote attackers to cause a denial of service via an invalid HTTP request Affected: through 9.1.2 |
| CVE-2016-2932 | 5.3 | Nov 30 | IBM BigFix Remote Control before 9.1.3 allows remote attackers to conduct XML injection attacks via unspecified vectors Affected: through 9.1.2 |
| CVE-2016-2931 | 5.3 | Nov 30 | IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive cleartext information by sniffing the network Affected: through 9.1.2 |
| CVE-2015-4953 | 4.8 | Mar 29 | IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 makes it easier for man-in-the-middle attackers to decrypt traffic by leveraging a weakness in its… Affected: 9.1.2 |
| CVE-2016-2928 | 4.3 | Nov 25 | IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to obtain sensitive information by reading error logs Affected: through 9.1.2 |
Showing 13