Bigfix Security Compliance Analytics (Ibm) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2017-10-05. Vendor: Ibm.

CVEs of Bigfix Security Compliance Analytics

• CVE-2017-1201 - CVSS 7.8 (high), 2017-10-05: IBM BigFix Compliance Analytics 1.9.79 (TEMA SUAv1 SCA SCM) stores user credentials in clear text which can be read by a local user. IBM X-Force ID: 123676.
• CVE-2017-1197 - CVSS 9.8 (critical), 2017-06-15: IBM BigFix Compliance (TEMA SUAv1 SCA SCM) uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.…
• CVE-2017-1179 - CVSS 5.9 (medium), 2017-06-08: IBM BigFix Compliance Analytics 1.9.79 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive…
• CVE-2017-1196 - CVSS 9.8 (critical), 2017-06-07: IBM BigFix Compliance (TEMA SUAv1 SCA SCM) 1.9.70 does not require that users should have strong passwords by default, which makes it easier for attackers to…
• CVE-2017-1178 - CVSS 6.1 (medium), 2017-06-07: IBM Endpoint Manager for Security and Compliance 1.9.70 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript…