CVE-2016-6082: Use After Free

IBM BigFix Platform could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free race condition. An attacker could exploit this vulnerability to execute arbitrary code on the system...

CVE-2016-6084: Improper Input Validation

IBM BigFix Platform could allow an attacker on the local network to crash the BES server using a specially crafted XMLSchema request...

CVE-2016-6085: Improper Access Control

IBM BigFix Platform could allow an attacker on the local network to crash the BES and relay servers...

IBM BigFix Platform 9.x < 9.1.9 / 9.2.x < 9.2.9 / 9.5.x < 9.5.4 Multiple Vulnerabilities

According to its self-reported version, the IBM BigFix Platform application running on the remote host is 9.x prior to 9.1.9, 9.2.x prior to 9.2.9, or 9.5.x prior to 9.5.4. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to a...

IBM BigFix Platform Denial of Service Vulnerability (CNVD-2017-00315)

IBM BigFix is an endpoint manager from IBM, system management software that can be run on a computer or mobile device, providing remote control, patch management, software distribution, operating system deployment, network access protection, and hardware and software catalogs. A denial of service...

IBM BigFix Platform Denial of Service Vulnerability

IBM BigFix platform is a dynamic set of IBM's integrated messaging content-driven and management system multi-technology platform. A denial of service vulnerability exists in IBM BigFix Platform versions 9.0 and 9.1. An attacker can exploit the vulnerability by sending a specially crafted XMLSche...

IBM BigFix Platform Remote Code Execution Vulnerability

IBM BigFix platform is a dynamic set of IBM's integrated messaging content-driven and management system multi-technology platform. A remote code execution vulnerability exists in IBM BigFix Platform. A remote attacker could exploit this vulnerability to execute arbitrary code on the system...

IBM BigFix Platform 9.x < 9.1.9.1301 / 9.2.9.36 / 9.5.4.38 Multiple Vulnerabilities

According to its self-reported version, the IBM BigFix Platform application running on the remote host is 9.0.x or 9.1.x prior to 9.1.9.1301, 9.2.x prior to 9.2.9.36, or 9.5.x prior to 9.5.4.38. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exist...

IBM BigFix Platform Local Information Disclosure Vulnerability

IBM BigFix Platform formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a set of system management software from IBM in the United States. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other...

IBM BigFix Platform Man-in-the-Middle Information Disclosure Vulnerability

IBM BigFix Platform formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a set of system management software from IBM in the United States. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other...

IBM BigFix Platform Arbitrary File Upload Vulnerability

IBM BigFix Platform formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a set of system management software from IBM in the United States. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other...

IBM BigFix Platform Remote Command Injection Vulnerability

IBM BigFix Platform formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a set of system management software from IBM in the United States. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other...

CVE-2016-0293

Cross-site scripting XSS vulnerability in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.1.8 and 9.2.x before 9.2.8 allows remote attackers to inject arbitrary web script or HTML via a modified .beswrpt file...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.1.8 and 9.2.x before 9.2.8 allows remote attackers to inject arbitrary web script or HTML via a modified .beswrpt file...

CVE-2016-0293

Cross-site scripting XSS vulnerability in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.1.8 and 9.2.x before 9.2.8 allows remote attackers to inject arbitrary web script or HTML via a modified .beswrpt file...

CVE-2016-0293: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.1.8 and 9.2.x before 9.2.8 allows remote attackers to inject arbitrary web script or HTML via a modified .beswrpt file...

Design/Logic Flaw

WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows local users to discover the cleartext system password by reading a report...

CVE-2016-0397

WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic...

CVE-2016-0292

WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows local users to discover the cleartext system password by reading a report...

CVE-2016-0292

CVE-2016-0292 describes a local disclosure vulnerability in IBM BigFix Platform's WebReports where WebReports 9.x prior to 9.5.2 can reveal plaintext system passwords by reading a report. The NVD lists CVSS v2 base score 2.1 (LOW) and CVSS v3 base score 5.5 (MEDIUM). Affected product: IBM BigFix ...