| CVE-2019-4058 |
IBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into exposing interface elements…
|
6.5
Medium
|
May 20, 2019 |
| CVE-2019-4011 |
IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting
|
5.4
Medium
|
May 20, 2019 |
| CVE-2018-2005 |
IBM BigFix Platform 9.2 and 9.5 stores potentially sensitive information in process memory that could be read by a local…
|
3.3
Low
|
May 20, 2019 |
| CVE-2019-4013 |
IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root…
|
9.0
Critical
|
Apr 10, 2019 |
| CVE-2019-4061 |
IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the…
|
5.3
Medium
|
Feb 27, 2019 |
| CVE-2018-1481 |
IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 stores sensitive information in URL parameters
|
3.7
Low
|
Dec 12, 2018 |
| CVE-2018-1480 |
IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the 'HttpOnly' attribute on authorization…
|
4.0
Medium
|
Dec 12, 2018 |
| CVE-2018-1485 |
IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not renew a session variable after a successful…
|
3.1
Low
|
Dec 12, 2018 |
| CVE-2018-1478 |
IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 could allow a remote attacker to hijack the clicking…
|
6.1
Medium
|
Dec 12, 2018 |
| CVE-2018-1484 |
IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the secure attribute on authorization tokens…
|
3.7
Low
|
Dec 12, 2018 |
| CVE-2018-1476 |
IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 discloses sensitive information to unauthorized users
|
5.3
Medium
|
Dec 12, 2018 |
| CVE-2018-1474 |
IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 is vulnerable to HTTP response splitting attacks,…
|
6.1
Medium
|
Dec 12, 2018 |
| CVE-2017-1231 |
IBM BigFix Platform 9.5 - 9.5.9 stores user credentials in plain in clear text which can be read by a local user
|
4.4
Medium
|
Oct 12, 2018 |
| CVE-2018-1600 |
IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a communication channel…
|
8.6
High
|
Jun 4, 2018 |
| CVE-2018-1479 |
IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute…
|
Not rated
|
Apr 27, 2018 |
| CVE-2018-1475 |
IBM BigFix Platform 9.2 and 9.5 uses an inadequate account lockout setting that could allow a remote attacker to brute…
|
Not rated
|
Apr 27, 2018 |
| CVE-2018-1473 |
IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting
|
Not rated
|
Apr 27, 2018 |
| CVE-2017-1221 |
IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by…
|
Not rated
|
Nov 13, 2017 |
| CVE-2017-1227 |
IBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash the system
|
Not rated
|
Jul 31, 2017 |