Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:bigfix_platform:9.5:*:*:*:*:*:*:*

part: a version: 9.5 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductBigfix Platform (015c23f1-9272-529a-81b4-b93c94e110a6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1521 vulnerable 2026-06-08 05:09:22.512307 Details available
IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications (IBM BigFix Platform 9.2 and 9.5) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129831.
Published: 2017-10-26T21:00:00.000Z
Updated: 2024-08-05T13:32:30.263Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1232 vulnerable 2026-06-08 05:09:21.435968 Details available
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. IBM X-Force ID: 123911.
Published: 2017-10-26T21:00:00.000Z
Updated: 2024-08-05T13:25:17.559Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1230 vulnerable 2026-06-08 05:09:21.435245 Details available
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) uses insufficiently random numbers or values in a security context that depends on unpredictable numbers. This weakness may allow attackers to expose sensitive information by guessing tokens or identifiers. IBM X-Force ID: 123909.
Published: 2017-10-26T21:00:00.000Z
Updated: 2024-08-05T13:25:17.450Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1229 vulnerable 2026-06-08 05:09:21.434891 Details available
IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 123908.
Published: 2017-11-13T23:00:00.000Z
Updated: 2024-09-17T02:58:03.806Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1228 vulnerable 2026-06-08 05:09:21.434543 Details available
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable the secure cookie attribute. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 123907.
Published: 2017-10-26T21:00:00.000Z
Updated: 2024-08-05T13:25:17.481Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1227 vulnerable 2026-06-08 05:09:21.434219 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1226 vulnerable 2026-06-08 05:09:21.433810 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1225 vulnerable 2026-06-08 05:09:21.433412 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1224 vulnerable 2026-06-08 05:09:21.433033 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1223 vulnerable 2026-06-08 05:09:21.432624 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1222 vulnerable 2026-06-08 05:09:21.432188 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1221 vulnerable 2026-06-08 05:09:21.431725 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1220 vulnerable 2026-06-08 05:09:21.427126 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1218 vulnerable 2026-06-08 05:09:21.426117 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1203 vulnerable 2026-06-08 05:09:21.372814 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6085 vulnerable 2026-06-08 05:07:58.808002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6082 vulnerable 2026-06-08 05:07:58.801686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0396 vulnerable 2026-06-08 05:07:15.220453 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0297 vulnerable 2026-06-08 05:07:14.903894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0296 vulnerable 2026-06-08 05:07:14.903506 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0214 vulnerable 2026-06-08 05:07:14.406808 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.