bigfix platform · threatengine.sh

Home/Product/ibm bigfix platform

Product

ibm bigfix platform

77 known vulnerabilities across versions

Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.

Sort Min CVSS Published since

>= 11.0.0 and <= 11.0.5

HCL BigFix Platform is affected by insufficient authentication. The application might allow users to access sensitive areas of

>= 11.0.0 and <= 11.0.5

HCL BigFix Platform is affected by insecure permissions on private cryptographic keys. The private cryptographic keys located on

>= 10.0.0 and < 10.0.13

HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. Thi

>= 10.0.0 and < 10.0.13

HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially weak validation of use

>= 10.0.0 and < 10.0.13

HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack, due to a potentially weak validation of an API parame

>= 9.5 and < 9.5.25

A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file under some cir

>= 9.5 and < 9.5.25

SSL/TLS Renegotiation functionality potentially leading to DoS attack vulnerability.

>= 9.5 and < 9.5.25

Cross-Site Request Forgery (CSRF) on Session Token vulnerability that could potentially lead to Remote Code Execution (RCE).

>= 9.5 and < 9.5.25

An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client Deploy Tool

>= 9.5 and < 9.5.24

The console may experience a service interruption when processing file names with invalid characters.

>= 9.5 and < 9.5.24

An administrative user of WebReports may perform a Cross Site Scripting (XSS) and/or Man in the Middle (MITM) exploit through SAML

>= 10 and < 10.0.11

An administrative user of WebReports may perform a Server Side Request Forgery (SSRF) exploit through SMTP configuration options.

>= 9.5 and < 9.5.24

A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to e

>= 9.5 and < 9.5.24

A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to e

>= 9.5 and < 9.5.24

A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to e

>= 9.5 and < 9.5.24

A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attack to exp

>= 9.5 and < 9.5.24

A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform exists due to missing a specific ht

>= 9.5 and < 9.5.24

A reflected cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an att

>= 9.5 and < 9.5.23

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68, allowing for poten

>= 9.5 and < 9.5.23

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. This XSS vulnerability is in the Download Status Report, which is

>= 9.0.0 and < 9.5.23

An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request.

>= 9.5.0 and < 9.5.21

There are insufficient warnings when a Fixlet is imported by a user. The warning message currently assumes the owner of the script

>= 9.5 and <= 9.5.20

In specific scenarios, on Windows the operator credentials may be encrypted in a manner that is not completely machine-dependent.

>= 9.5 and <= 9.5.19

BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page.

>= 9.5 and <= 9.5.19

BigFix Web Reports authorized users may see SMTP credentials in clear text.

>= 9.5 and <= 9.5.18

The BigFix Console installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow

>= 9.5 and <= 9.5.18

The BigFix Client installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow

>= 9.5 and <= 9.5.18

The BigFix Server API installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could al

>= 9.5 and < 9.5.19

Misconfigured security-related HTTP headers: Several security-related headers were missing or mis-configured on the web responses

>= 9.5 and < 9.5.19

Weak web transport security (Weak TLS): An attacker may be able to decrypt the data using attacks

TLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2. If TLS 2.0 and secure ciphers are not enabled then a

>= 9.0.0 and <= 10.0.2

BigFix Inventory up to v10.0.2 does not set the secure flag for the session cookie in an https session, which can cause the cookie

>= 9.2 and <= 9.2.19

"BigFix Platform is storing clear text credentials within the system's memory. An attacker who is able to gain administrative priv

>= 9.2 and <= 9.2.17

IBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into exposing interface elements and informa

>= 9.2 and <= 9.2.17

IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScri

>= 9.2 and <= 9.2.17

IBM BigFix Platform 9.2 and 9.5 stores potentially sensitive information in process memory that could be read by a local attacker

>= 9.5.0 and <= 9.5.11

IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root privileges.

>= 9.2 and <= 9.2.16

IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and f

>= 9.2.0 and <= 9.2.14

IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not renew a session variable after a successful authentication

>= 9.2.0 and <= 9.2.14

IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the secure attribute on authorization tokens or sessio

>= 9.2.0 and <= 9.2.14

IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 stores sensitive information in URL parameters. This may lead to in

>= 9.2.0 and <= 9.2.14

IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the 'HttpOnly' attribute on authorization tokens or se

>= 9.2.0 and <= 9.2.14

IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 could allow a remote attacker to hijack the clicking action of the

>= 9.2 and <= 9.2.14

IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 discloses sensitive information to unauthorized users. The informat

>= 9.2.0 and <= 9.2.14

IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 is vulnerable to HTTP response splitting attacks, caused by imprope

>= 9.5 and <= 9.5.9

IBM BigFix Platform 9.5 - 9.5.9 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID:

>= 9.2 and <= 9.2.13

IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a communication channel that can be

>= 9.2 and <= 9.2.13

IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and

>= 9.2 and <= 9.2.13

IBM BigFix Platform 9.2 and 9.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force accou

>= 9.2 and <= 9.2.13

IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScri

>= 9.5 and < 9.5.2

Cross-site request forgery (CSRF) vulnerability in the IBM BigFix Platform 9.0, 9.1, 9.2, and 9.5 before 9.5.2 allows remote attac

>= 9.1 and < 9.1.8

IBM BigFix Platform 9.0, 9.1 before 9.1.8, and 9.2 before 9.2.8 allow remote authenticated users to execute arbitrary commands by

IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the

IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default, which ma

IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications (IBM BigFix Platform 9.2 and 9.5) is vulnerable

IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) transmits sensitive or security-critical data in cleartext in a comm

IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) uses insufficiently random numbers or values in a security context t

IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, cause

IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) generates an error message in error logs that includes sensitive inf

IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) stores sensitive information in URL parameters. This may lead to inf

IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) does not perform an authentication check for a critical resource or

IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) discloses sensitive information to unauthorized users. The informati

IBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash the system. IBM X-Force ID: 123906.

IBM Tivoli Endpoint Manager uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sens

IBM Tivoli Endpoint Manager could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuadin

IBM Tivoli Endpoint Manager is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attac

IBM Tivoli Endpoint Manager is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and una

IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications is vulnerable to cross-site scripting. This vuln

IBM Tivoli Endpoint Manager could allow a remote attacker to upload arbitrary files. A remote attacker could exploit this vulnerab

IBM BigFix Platform could allow an attacker on the local network to crash the BES and relay servers.

IBM BigFix Platform could allow an attacker on the local network to crash the BES server using a specially crafted XMLSchema reque

IBM BigFix Platform could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free race conditi

IBM Tivoli Endpoint Manager could allow a user under special circumstances to inject commands that would be executed with unnecess

IBM Tivoli Endpoint Manager - Mobile Device Management (MDM) could allow a remote attacker to obtain sensitive information due to

IBM Tivoli Endpoint Manager - Mobile Device Management (MDM) stores potentially sensitive information in log files that could be a

Cross-site scripting (XSS) vulnerability in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.1.8 and 9.2.x befo

Cross-site scripting (XSS) vulnerability in IBM BigFix Platform 9.x before 9.1.8 and 9.2.x before 9.2.7 allows remote authenticate

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin