IBM BigFix Platform vulnerabilities

CVEs per yearBy the year they were published

1. 20172
2. 201812
3. 20195

Newest CVEs

• CVE-2019-4058

  IBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into exposing interface elements and information normally restricted to…

  IBM · BigFix Platform

  Medium6.5
• CVE-2019-4011

  IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…

  IBM · BigFix Platform

  Medium5.4
• CVE-2018-2005

  IBM BigFix Platform 9.2 and 9.5 stores potentially sensitive information in process memory that could be read by a local attacker with elevated permissions.…

  IBM · BigFix Platform

  Low3.3
• CVE-2019-4013

  IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root privileges. This results in code…

  IBM · BigFix Platform

  Critical9.0
• CVE-2019-4061

  IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the…

  IBM · BigFix Platform

  Medium5.3
• CVE-2018-1485

  IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not renew a session variable after a successful authentication which could lead to session…

  IBM · BigFix Platform

  Low3.1
• CVE-2018-1484

  IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the secure attribute on authorization tokens or session cookies. Attackers may be…

  IBM · BigFix Platform

  Low3.7
• CVE-2018-1481

  IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 stores sensitive information in URL parameters. This may lead to information disclosure if…

  IBM · BigFix Platform

  Low3.7
• CVE-2018-1480

  IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the 'HttpOnly' attribute on authorization tokens or session cookies. If a…

  IBM · BigFix Platform

  Medium4.0
• CVE-2018-1478

  IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 could allow a remote attacker to hijack the clicking action of the victim. By persuading a…

  IBM · BigFix Platform

  Medium6.1