Bigfix Family (Ibm) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2017-11-13. Vendor: Ibm.

CVEs of Bigfix Family

• CVE-2017-1229 - CVSS 5.9 (medium), 2017-11-13: IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable…
• CVE-2017-1218 - CVSS 8.8 (high), 2017-07-19: IBM Tivoli Endpoint Manager is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions…
• CVE-2017-1224 - CVSS 7.5 (high), 2017-07-19: IBM Tivoli Endpoint Manager uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM…
• CVE-2017-1203 - CVSS 6.1 (medium), 2017-07-19: IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications is vulnerable to cross-site scripting. This vulnerability allows users to…
• CVE-2017-1223 - CVSS 6.1 (medium), 2017-07-19: IBM Tivoli Endpoint Manager could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a…
• CVE-2017-1219 - CVSS 6.5 (medium), 2017-07-19: IBM Tivoli Endpoint Manager is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this…