Skip to content

Known vulnerabilities in IBM BigFix family

Is your version affected?

CVE Summary Score Published
CVE-2017-1229 IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) could allow a remote attacker to obtain sensitive information,… Not rated Nov 13, 2017
CVE-2017-1218 IBM Tivoli Endpoint Manager is vulnerable to cross-site request forgery which could allow an attacker to execute… Not rated Jul 19, 2017
CVE-2017-1203 IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications is vulnerable to cross-site scripting Not rated Jul 19, 2017
CVE-2017-1224 IBM Tivoli Endpoint Manager uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt… Not rated Jul 19, 2017
CVE-2017-1223 IBM Tivoli Endpoint Manager could allow a remote attacker to conduct phishing attacks, using an open redirect attack Not rated Jul 19, 2017
CVE-2017-1219 IBM Tivoli Endpoint Manager is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data Not rated Jul 19, 2017

Other IBM products