29 matches found
PT-2023-26008 · Ibm · Bigfix Server +1
Name of the Vulnerable Software and Affected Versions: BigFix Server version 9.5.12.68 Description: An Unauthenticated Stored Cross-Site Scripting XSS issue has been identified, allowing for potential data exfiltration. This issue is located in the Gather Status Report, which is served by the...
PT-2023-26006 · Ibm · Bigfix Server
Name of the Vulnerable Software and Affected Versions: BigFix Server affected versions not specified Description: The issue is an Unauthenticated Stored Cross-Site Scripting XSS vulnerability. This vulnerability is located in the Download Status Report, which is served by the BigFix Server...
CVE-2021-27765
The BigFix Server API installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed...
CVE-2021-27765
The BigFix Server API installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed...
Privilege escalation
The BigFix Server API installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed...
IBM BigFix Platform Information Disclosure Vulnerability (CNVD-2017-32854)
IBM BigFix Platform is a dynamic integrated messaging content-driven and management system multi-technology platform from IBM, USA.BigFix Server compoment is one of the BigFix server components. An information disclosure vulnerability exists in the BigFix Server component of the IBM BigFix Platfo...
CVE-2016-6084
IBM BigFix Platform could allow an attacker on the local network to crash the BES server using a specially crafted XMLSchema request...
