1506 matches found
CVE-2016-0292
CVE-2016-0292 describes a local disclosure vulnerability in IBM BigFix Platform's WebReports where WebReports 9.x prior to 9.5.2 can reveal plaintext system passwords by reading a report. The NVD lists CVSS v2 base score 2.1 (LOW) and CVSS v3 base score 5.5 (MEDIUM). Affected product: IBM BigFix ...
IBM BigFix Server 9.2.x < 9.2.7.53 BES Gather XSS
According to its self-reported version, the IBM BigFix Server running on the remote host is version 9.2.x prior to 9.2.7.53. It is, therefore, affected by a reflected cross-site scripting XSS vulnerability that exists in the BES gather function due to improper validation of input before returning...
IBM BigFix Server 9.2.x < 9.2.8.74 .beswrpt File Handling XSS
According to its self-reported version, the IBM BigFix Server running on the remote host is version 9.2.x prior to 9.2.8.74. It is, therefore affected by a reflected cross-site scripting vulnerability when handling .beswrpt files due to improper validation of input before returning it to users. A...
IBM BigFix Server 9.1.x < 9.1.1275.0 Multiple XSS
According to its self-reported version, the IBM BigFix Server running on the remote host is version 9.1.x prior to 9.1.1275.0. It is, therefore, affected by multiple vulnerabilities : - A reflected cross-site scripting XSS vulnerability exists in the BES gather function due to improper validation...
IBM BigFix Platform Cross-Site Scripting Vulnerability
IBM BigFix formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a set of system management software from the American company IBM. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other function...
IBM BigFix Platform Cross-Site Request Forgery Vulnerability
IBM BigFix formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a set of system management software from the American company IBM. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other function...
IBM BigFix Platform Operating System Command Injection Vulnerability
IBM BigFix formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a set of system management software from the American company IBM. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other function...
IBM BigFix WebReports Password Disclosure Vulnerability
IBM BigFix formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a suite of system management software from IBM in the United States. The software provides remote control, patch management, software distribution, operating system deployment, network access protection, etc. BigFix...
IBM BixFix Platform Man-in-the-Middle Information Disclosure Vulnerability
IBM BigFix formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a set of system management software from the American company IBM. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other function...
CVE-2016-0269
Cross-site scripting XSS vulnerability in IBM BigFix Platform 9.x before 9.1.8 and 9.2.x before 9.2.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2016-0269
Cross-site scripting XSS vulnerability in IBM BigFix Platform 9.x before 9.1.8 and 9.2.x before 9.2.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM BigFix Platform 9.x before 9.1.8 and 9.2.x before 9.2.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2016-0269
Cross-site scripting XSS vulnerability in IBM BigFix Platform 9.x before 9.1.8 and 9.2.x before 9.2.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2016-0269
CVE-2016-0269 affects IBM BigFix Platform/BES Gather component on IBM BigFix Server (9.x). The vulnerability is an XSS in BES Gather or related handling that allows remote (authenticated) attackers to inject arbitrary scripts via crafted URLs. Affected versions include 9.x before 9.1.8 and 9.2.x ...
IBM BigFix Cross-Site Scripting Vulnerability
IBM BigFix formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a suite of systems management software from the American company IBM. A cross-site scripting vulnerability exists in the BES Gather feature of the IBM BigFix platform, which can be exploited by remote attackers with the...
Apache Struts CVE-2016-1181 Remote Code Execution Vulnerability
Description Apache Struts is prone to a remote code-execution vulnerability. Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the affected application. Failed exploit attempts may cause a denial-of-service condition. Apache Struts 1.0 through...
IBM Endpoint Manager Web Server Detection
The remote host is running an IBM Tivoli Endpoint Manager formerly BigFix web server. IBM Endpoint Manager is a software management solution for networked devices. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66269; scriptversion"1.6";...
Patch Management: HCL BigFix Get Installed Packages
Binary data ibmtemgetpackages.nbin...