| CVE-2019-4058 |
IBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into exposing interface elements…
|
6.5
Moyenne
|
20 mai 2019 |
| CVE-2019-4011 |
IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
20 mai 2019 |
| CVE-2018-2005 |
IBM BigFix Platform 9.2 and 9.5 stores potentially sensitive information in process memory that could be read by a local…
|
3.3
Faible
|
20 mai 2019 |
| CVE-2019-4013 |
IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root…
|
9.0
Critique
|
10 avr. 2019 |
| CVE-2019-4061 |
IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the…
|
5.3
Moyenne
|
27 févr. 2019 |
| CVE-2018-1481 |
IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 stores sensitive information in URL parameters
|
3.7
Faible
|
12 déc. 2018 |
| CVE-2018-1480 |
IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the 'HttpOnly' attribute on authorization…
|
4.0
Moyenne
|
12 déc. 2018 |
| CVE-2018-1485 |
IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not renew a session variable after a successful…
|
3.1
Faible
|
12 déc. 2018 |
| CVE-2018-1478 |
IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 could allow a remote attacker to hijack the clicking…
|
6.1
Moyenne
|
12 déc. 2018 |
| CVE-2018-1484 |
IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the secure attribute on authorization tokens…
|
3.7
Faible
|
12 déc. 2018 |
| CVE-2018-1476 |
IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 discloses sensitive information to unauthorized users
|
5.3
Moyenne
|
12 déc. 2018 |
| CVE-2018-1474 |
IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 is vulnerable to HTTP response splitting attacks,…
|
6.1
Moyenne
|
12 déc. 2018 |
| CVE-2017-1231 |
IBM BigFix Platform 9.5 - 9.5.9 stores user credentials in plain in clear text which can be read by a local user
|
4.4
Moyenne
|
12 oct. 2018 |
| CVE-2018-1600 |
IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a communication channel…
|
8.6
Élevée
|
4 juin 2018 |
| CVE-2018-1479 |
IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute…
|
Non notée
|
27 avr. 2018 |
| CVE-2018-1475 |
IBM BigFix Platform 9.2 and 9.5 uses an inadequate account lockout setting that could allow a remote attacker to brute…
|
Non notée
|
27 avr. 2018 |
| CVE-2018-1473 |
IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting
|
Non notée
|
27 avr. 2018 |
| CVE-2017-1221 |
IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by…
|
Non notée
|
13 nov. 2017 |
| CVE-2017-1227 |
IBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash the system
|
Non notée
|
31 juil. 2017 |