IBM BigFix Platform Local Information Disclosure Vulnerability

IBM BigFix Platform formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a set of system management software from IBM in the United States. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other...

IBM BigFix Platform Man-in-the-Middle Information Disclosure Vulnerability

IBM BigFix Platform formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a set of system management software from IBM in the United States. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other...

IBM BigFix Platform Arbitrary File Upload Vulnerability

IBM BigFix Platform formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a set of system management software from IBM in the United States. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other...

IBM BigFix Platform Remote Command Injection Vulnerability

IBM BigFix Platform formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a set of system management software from IBM in the United States. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other...

IBM BigFix (Formerly Tivoli Endpoint Manager) Multiple Vulnerabilities (Oct 2016)

IBM BigFix Formerly Tivoli Endpoint Manager is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-0293

Cross-site scripting XSS vulnerability in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.1.8 and 9.2.x before 9.2.8 allows remote attackers to inject arbitrary web script or HTML via a modified .beswrpt file...

CVE-2016-0293

Cross-site scripting XSS vulnerability in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.1.8 and 9.2.x before 9.2.8 allows remote attackers to inject arbitrary web script or HTML via a modified .beswrpt file...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.1.8 and 9.2.x before 9.2.8 allows remote attackers to inject arbitrary web script or HTML via a modified .beswrpt file...

CVE-2016-0293

IBM BigFix Platform (formerly Tivoli Endpoint Manager) is affected by a cross-site scripting (XSS) vulnerability in the BESWRPT handling for versions 9.x before 9.1.8 and 9.2.x before 9.2.8. The issue allows remote attackers to inject arbitrary web script or HTML via a modified .beswrpt file. Sev...

CVE-2016-0293

Cross-site scripting XSS vulnerability in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.1.8 and 9.2.x before 9.2.8 allows remote attackers to inject arbitrary web script or HTML via a modified .beswrpt file...

CVE-2016-0397

WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic...

CVE-2016-0397

WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic...

CVE-2016-0292

WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows local users to discover the cleartext system password by reading a report...

Design/Logic Flaw

WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic...

Design/Logic Flaw

WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows local users to discover the cleartext system password by reading a report...

CVE-2016-0397

CVE-2016-0397 - IBM BigFix Platform (WebReports) : WebReports in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x prior to 9.5.2 allows remote attackers to obtain sensitive information by sniffing unencrypted HTTP traffic. The description specifies the affected product and version range...

CVE-2016-0292

WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows local users to discover the cleartext system password by reading a report...

CVE-2016-0397

WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic...

CVE-2016-0292

CVE-2016-0292 describes a local disclosure vulnerability in IBM BigFix Platform's WebReports where WebReports 9.x prior to 9.5.2 can reveal plaintext system passwords by reading a report. The NVD lists CVSS v2 base score 2.1 (LOW) and CVSS v3 base score 5.5 (MEDIUM). Affected product: IBM BigFix ...

IBM BigFix Server 9.2.x < 9.2.7.53 BES Gather XSS

According to its self-reported version, the IBM BigFix Server running on the remote host is version 9.2.x prior to 9.2.7.53. It is, therefore, affected by a reflected cross-site scripting XSS vulnerability that exists in the BES gather function due to improper validation of input before returning...