CVE-2016-0292

WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows local users to discover the cleartext system password by reading a report...

PT-2016-4183

Name of the Vulnerable Software and Affected Versions IBM BigFix Platform formerly Tivoli Endpoint Manager versions 9.0 through 9.5.1 Description The issue allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic. This is related to WebReports in the IBM...

CVE-2016-0292: Exposure of Sensitive Information to an Unauthorized Actor

WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows local users to discover the cleartext system password by reading a report...

PT-2016-4132

Name of the Vulnerable Software and Affected Versions IBM BigFix Platform formerly Tivoli Endpoint Manager versions 9.0 through 9.5.1 Description The issue allows local users to discover the cleartext system password by reading a report generated by WebReports in the IBM BigFix Platform...

CVE-2016-0397: Exposure of Sensitive Information to an Unauthorized Actor

WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic...

IBM BigFix WebReports Password Disclosure Vulnerability

IBM BigFix formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a suite of system management software from IBM in the United States. The software provides remote control, patch management, software distribution, operating system deployment, network access protection, etc. BigFix...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Tivoli Endpoint Manager TEM 8 before 8.2 patch 3 allows remote attackers to inject arbitrary web script or HTML via the ScheduleParam parameter to the webreports program...

CVE-2012-1837

The 1 webreports, 2 post/create-role, and 3 post/update-role programs in IBM Tivoli Endpoint Manager TEM before 8.2 do not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to thi...

CVE-2012-0719

CVE-2012-0719: IBM Tivoli Endpoint Manager (TEM) 8 prior to 8.2 patch 3 is vulnerable to a cross-site scripting (XSS) flaw in the webreports component. The issue arises from untrusted input in the ScheduleParam parameter, enabling an attacker to inject arbitrary script/HTML. Connected sources con...

CVE-2012-1837: Exposure of Sensitive Information to an Unauthorized Actor

The 1 webreports, 2 post/create-role, and 3 post/update-role programs in IBM Tivoli Endpoint Manager TEM before 8.2 do not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to thi...

PT-2012-2813

Name of the Vulnerable Software and Affected Versions IBM Tivoli Endpoint Manager TEM versions 8.0 through 8.2 before patch 3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the ScheduleParam parameter to the "webreports" program...

CVE-2012-0719: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Tivoli Endpoint Manager TEM 8 before 8.2 patch 3 allows remote attackers to inject arbitrary web script or HTML via the ScheduleParam parameter to the webreports program...

PT-2012-3581

Name of the Vulnerable Software and Affected Versions IBM Tivoli Endpoint Manager versions prior to 8.2 Description The issue concerns the webreports, post/create-role, and post/update-role programs in IBM Tivoli Endpoint Manager. These programs do not include the HTTPOnly flag in a Set-Cookie...