CVE-2014-3066

IBM Tivoli Endpoint Manager 9.1 before 9.1.1088.0 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

CVE-2014-3066: Exposure of Sensitive Information to an Unauthorized Actor

IBM Tivoli Endpoint Manager 9.1 before 9.1.1088.0 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

PT-2014-5060

Name of the Vulnerable Software and Affected Versions IBM Tivoli Endpoint Manager version 9.1 before 9.1.1088.0 Description The issue allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML...

IBM Tivoli Endpoint Manager POST Query Buffer Overflow

No description provided by source. $Id: ibmtivoliendpointbof.rb 12925 2011-06-12 00:04:55Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

SEC Consult SA-20140218-0 :: Multiple critical vulnerabilities in Symantec Endpoint Protection

SEC Consult Vulnerability Lab Security Advisory 20140218-0 ======================================================================= title: Multiple critical vulnerabilities product: Symantec Endpoint Protection vulnerable version: 11.0, 12.0, 12.1 fixed version: =11.0.7405.1424 =12.1.4023.4080...

IBM Tivoli Endpoint Manager Server 9.0.777 (patch 2) LDAP and AD Authentication

According to its self-reported version, IBM Tivoli Endpoint Manager Server 9.0.777.0 patch 2 is installed on the remote host. It is, therefore, affected by a vulnerability that could allow an attacker to impersonate any LDAP-authenticated Console user when LDAP and Active Directory authentication...

IBM Tivoli Endpoint Manager POST Query Buffer Overflow (CVE-2011-1220)

A stack based buffer overflow in IBM Tivoli Endpoint...

IBM Endpoint Manager Web Server Detection

The remote host is running an IBM Tivoli Endpoint Manager formerly BigFix web server. IBM Endpoint Manager is a software management solution for networked devices. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66269; scriptversion"1.6";...

IBM Tivoli Endpoint Manager Server < 8.2.1372 Multiple Vulnerabilities

The remote host is running a version of IBM Tivoli Endpoint Manager Server prior to 8.2.1372. It is, therefore, affected by multiple vulnerabilities : - Multiple SSL related denial of service vulnerabilities exist. CVE-2012-2686, CVE-2013-0166 - An SSL side-channel timing analysis attack allows...

CVE-2013-0452

Cross-site request forgery CSRF vulnerability in the Software Use Analysis SUA application before 1.3.3 in IBM Tivoli Endpoint Manager 8.2 allows remote attackers to hijack the authentication of arbitrary users via a web site that contains crafted Flash Action Message Format AMF messages...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Software Use Analysis SUA application before 1.3.3 in IBM Tivoli Endpoint Manager 8.2 allows remote attackers to hijack the authentication of arbitrary users via a web site that contains crafted Flash Action Message Format AMF messages...

CVE-2013-0452

Cross-site request forgery CSRF vulnerability in the Software Use Analysis SUA application before 1.3.3 in IBM Tivoli Endpoint Manager 8.2 allows remote attackers to hijack the authentication of arbitrary users via a web site that contains crafted Flash Action Message Format AMF messages...

CVE-2013-0452

The CVE-2013-0452 entry applies to IBM Tivoli Endpoint Manager (TEM) Server/Use Analysis app in TEM 8.2 prior to 8.2.1372, where a CSRF flaw allows an attacker to hijack user authentication via a crafted Flash AMF message. The issue is specifically in the Software Use Analysis (SUA) application b...

PT-2013-2347

Name of the Vulnerable Software and Affected Versions IBM Tivoli Endpoint Manager 8.2 versions prior to 1.3.3 Description A cross-site request forgery CSRF issue exists in the Software Use Analysis SUA application, allowing remote attackers to hijack the authentication of arbitrary users via a we...

CVE-2013-0452: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Software Use Analysis SUA application before 1.3.3 in IBM Tivoli Endpoint Manager 8.2 allows remote attackers to hijack the authentication of arbitrary users via a web site that contains crafted Flash Action Message Format AMF messages...

CVE-2013-0453

Cross-site scripting XSS vulnerability in Web Reports in IBM Tivoli Endpoint Manager TEM before 8.2.1372 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in Web Reports in IBM Tivoli Endpoint Manager TEM before 8.2.1372 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2013-0453

Cross-site scripting XSS vulnerability in Web Reports in IBM Tivoli Endpoint Manager TEM before 8.2.1372 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2013-0453

IBM Tivoli Endpoint Manager (TEM) Web Reports is affected by CVE-2013-0453: an XSS vulnerability in Web Reports allows remote authenticated users to inject arbitrary script or HTML via a crafted URL. Affected are TEM Server versions prior to 8.2.1372. The issue is mapped to CVE-2013-0453 with a C...

PT-2013-2348

Name of the Vulnerable Software and Affected Versions IBM Tivoli Endpoint Manager TEM versions prior to 8.2.1372 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via a crafted URL. This affects the Web Reports componen...