CVE-2023-33443

Affected software: BES--6024PB-I50H1 VideoPlayTool 2.0.1.0. Vulnerability: Incorrect access control in the administrative functionalities. Impact: attacker can execute arbitrary administrative commands via a crafted payload sent to the endpoints. Root cause: improper access control checks in the ...

CVE-2022-38658

CVE-2022-38658 affects HCL BigFix Server Automation deployments that have the Notification Service installed on Windows. The root issue is exposure of SMTP BigFix operators’ sensitive data in cleartext via the Notification Service content from BES Support. Impact is limited to confidentiality, wi...

CVE-2022-38655

BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of fixlets or to deploy fixlets from the BES Support external site...

CVE-2022-38655

BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of fixlets or to deploy fixlets from the BES Support external site...

Xxe

BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of fixlets or to deploy fixlets from the BES Support external site...

CVE-2022-38655 HCL BigFix WebUI is affected by a missing-permission-check vulnerability

BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of fixlets or to deploy fixlets from the BES Support external site...

XML Entity Injection Vulnerability in BES Management Console of Beijing Bowland Software Co.

Beijing Bowland Software Co., Ltd. is a high-tech software enterprise specializing in the development and promotion of basic software. An XML entity injection vulnerability exists in the BES management console of Beijing Bowland Software Co., Ltd, which can be exploited by attackers to obtain...

Unauthorized Access Vulnerability in BES Management Console of Beijing Bowland Software Co.

Beijing Bowland Software Co., Ltd. is a high-tech software enterprise specializing in the development and promotion of basic software. An unauthorized access vulnerability exists in the BES management console of Beijing Bowland Software Co., Ltd, which can be exploited by attackers to obtain...

Logic Flaw Vulnerability in BES Management Console of Beijing Bowland Software Co. Ltd (CNVD-2022-48625)

Beijing Bowland Software Co., Ltd. is a high-tech software enterprise specializing in the development and promotion of basic software. A logic flaw vulnerability exists in the BES management console of Beijing Bowland Software Co., Ltd, which can be exploited by attackers to obtain sensitive...

bes-immobilien.de Cross Site Scripting vulnerability OBB-1428317

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

bes.seafordbluejays.org XSS vulnerability

Vulnerable URL: http://bes.seafordbluejays.org/apps/news/shownews.jsp?RECID=319404=0=News%20Post%20Ident-A-Kid%20is%20Returning%20to%20Blades!%20-%20Blades%20Elementary%3C/title%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 15.10.2017 Latest check for...

CVE-2016-6085

IBM BigFix Platform could allow an attacker on the local network to crash the BES and relay servers...

Cross site request forgery (csrf)

IBM BigFix Platform could allow an attacker on the local network to crash the BES server using a specially crafted XMLSchema request...

CVE-2016-6085

IBM BigFix Platform could allow an attacker on the local network to crash the BES and relay servers...

CVE-2016-6084: Improper Input Validation

IBM BigFix Platform could allow an attacker on the local network to crash the BES server using a specially crafted XMLSchema request...

CVE-2016-6085: Improper Access Control

IBM BigFix Platform could allow an attacker on the local network to crash the BES and relay servers...

IBM BigFix Platform 9.x < 9.1.9 / 9.2.x < 9.2.9 / 9.5.x < 9.5.4 Multiple Vulnerabilities

According to its self-reported version, the IBM BigFix Platform application running on the remote host is 9.x prior to 9.1.9, 9.2.x prior to 9.2.9, or 9.5.x prior to 9.5.4. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to a...

CVE-2016-3130

An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server BES 12 through 12.5.2 allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt...

CVE-2016-3128

CVE-2016-3128 affects the Core of BlackBerry Enterprise Server (BES) versions 12 through 12.5.2. The vulnerability enables remote attackers to enroll an illegitimate device, access device parameters, or send false information to the BES by leveraging information about a legitimately enrolled devi...

CVE-2016-3130

CVE-2016-3130 describes an information-disclosure vulnerability in the Core and Management Console of BlackBerry Enterprise Server (BES) . Affected: BES versions 12 through 12.5.2 . The issue allows remote attackers to obtain credentials (local or domain) of an administrator or user by sniffing t...