Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*

part: a version: 9.2 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductBigfix Platform (015c23f1-9272-529a-81b4-b93c94e110a6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1521 vulnerable 2026-06-08 05:09:22.512284 Details available
IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications (IBM BigFix Platform 9.2 and 9.5) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129831.
Published: 2017-10-26T21:00:00.000Z
Updated: 2024-08-05T13:32:30.263Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1232 vulnerable 2026-06-08 05:09:21.435945 Details available
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. IBM X-Force ID: 123911.
Published: 2017-10-26T21:00:00.000Z
Updated: 2024-08-05T13:25:17.559Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1230 vulnerable 2026-06-08 05:09:21.435224 Details available
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) uses insufficiently random numbers or values in a security context that depends on unpredictable numbers. This weakness may allow attackers to expose sensitive information by guessing tokens or identifiers. IBM X-Force ID: 123909.
Published: 2017-10-26T21:00:00.000Z
Updated: 2024-08-05T13:25:17.450Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1229 vulnerable 2026-06-08 05:09:21.434866 Details available
IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 123908.
Published: 2017-11-13T23:00:00.000Z
Updated: 2024-09-17T02:58:03.806Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1228 vulnerable 2026-06-08 05:09:21.434523 Details available
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable the secure cookie attribute. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 123907.
Published: 2017-10-26T21:00:00.000Z
Updated: 2024-08-05T13:25:17.481Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1227 vulnerable 2026-06-08 05:09:21.434201 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1226 vulnerable 2026-06-08 05:09:21.433775 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1225 vulnerable 2026-06-08 05:09:21.433392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1222 vulnerable 2026-06-08 05:09:21.432166 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1221 vulnerable 2026-06-08 05:09:21.431699 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1220 vulnerable 2026-06-08 05:09:21.427106 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1219 vulnerable 2026-06-08 05:09:21.426649 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1203 vulnerable 2026-06-08 05:09:21.367650 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6085 vulnerable 2026-06-08 05:07:58.807984 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6082 vulnerable 2026-06-08 05:07:58.801090 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0396 vulnerable 2026-06-08 05:07:15.220435 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0297 vulnerable 2026-06-08 05:07:14.903877 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0296 vulnerable 2026-06-08 05:07:14.903489 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0295 vulnerable 2026-06-08 05:07:14.903116 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0214 vulnerable 2026-06-08 05:07:14.406332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.