IBM BigFix (Formerly Tivoli Endpoint Manager) Multiple Vulnerabilities (Oct 2016)

IBM BigFix Formerly Tivoli Endpoint Manager is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-0293

Cross-site scripting XSS vulnerability in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.1.8 and 9.2.x before 9.2.8 allows remote attackers to inject arbitrary web script or HTML via a modified .beswrpt file...

CVE-2016-0293

Cross-site scripting XSS vulnerability in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.1.8 and 9.2.x before 9.2.8 allows remote attackers to inject arbitrary web script or HTML via a modified .beswrpt file...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.1.8 and 9.2.x before 9.2.8 allows remote attackers to inject arbitrary web script or HTML via a modified .beswrpt file...

CVE-2016-0293

Cross-site scripting XSS vulnerability in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.1.8 and 9.2.x before 9.2.8 allows remote attackers to inject arbitrary web script or HTML via a modified .beswrpt file...

CVE-2016-0293

IBM BigFix Platform (formerly Tivoli Endpoint Manager) is affected by a cross-site scripting (XSS) vulnerability in the BESWRPT handling for versions 9.x before 9.1.8 and 9.2.x before 9.2.8. The issue allows remote attackers to inject arbitrary web script or HTML via a modified .beswrpt file. Sev...

CVE-2016-0397

WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic...

CVE-2016-0397

WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic...

CVE-2016-0292

WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows local users to discover the cleartext system password by reading a report...

Design/Logic Flaw

WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic...

Design/Logic Flaw

WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows local users to discover the cleartext system password by reading a report...

CVE-2016-0397

WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic...

CVE-2016-0292

CVE-2016-0292 describes a local disclosure vulnerability in IBM BigFix Platform's WebReports where WebReports 9.x prior to 9.5.2 can reveal plaintext system passwords by reading a report. The NVD lists CVSS v2 base score 2.1 (LOW) and CVSS v3 base score 5.5 (MEDIUM). Affected product: IBM BigFix ...

CVE-2016-0397

CVE-2016-0397 - IBM BigFix Platform (WebReports) : WebReports in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x prior to 9.5.2 allows remote attackers to obtain sensitive information by sniffing unencrypted HTTP traffic. The description specifies the affected product and version range...

CVE-2016-0292

WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows local users to discover the cleartext system password by reading a report...

IBM BigFix Server 9.2.x < 9.2.8.74 .beswrpt File Handling XSS

According to its self-reported version, the IBM BigFix Server running on the remote host is version 9.2.x prior to 9.2.8.74. It is, therefore affected by a reflected cross-site scripting vulnerability when handling .beswrpt files due to improper validation of input before returning it to users. A...

IBM BigFix Server 9.2.x < 9.2.7.53 BES Gather XSS

According to its self-reported version, the IBM BigFix Server running on the remote host is version 9.2.x prior to 9.2.7.53. It is, therefore, affected by a reflected cross-site scripting XSS vulnerability that exists in the BES gather function due to improper validation of input before returning...

IBM BigFix Server 9.1.x < 9.1.1275.0 Multiple XSS

According to its self-reported version, the IBM BigFix Server running on the remote host is version 9.1.x prior to 9.1.1275.0. It is, therefore, affected by multiple vulnerabilities : - A reflected cross-site scripting XSS vulnerability exists in the BES gather function due to improper validation...

IBM BigFix Platform Cross-Site Scripting Vulnerability

IBM BigFix formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a set of system management software from the American company IBM. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other function...

IBM BigFix Platform Operating System Command Injection Vulnerability

IBM BigFix formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a set of system management software from the American company IBM. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other function...