GCVE - cpe:2.3:a:ibm:bigfix_inventory:9.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:bigfix_inventory:9.2:*:*:*:*:*:*:*

part: a version: 9.2 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Bigfix Inventory (`b4621832-3822-581b-b5c6-7fd79d448c9a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-8981`	vulnerable	2026-06-08 05:08:22.355521	Details available IBM BigFix Inventory v9 allows web pages to be stored locally which can be read by another user on the system. Published: 2017-02-01T20:00:00.000Z Updated: 2024-08-06T02:35:02.349Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/95137 http://www.ibm.com/support/docview.wss?uid=swg21994932	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8980`	vulnerable	2026-06-08 05:08:22.355070	Details available IBM BigFix Inventory v9 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. Published: 2017-02-01T20:00:00.000Z Updated: 2024-08-06T02:35:02.296Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/95141 http://www.ibm.com/support/docview.wss?uid=swg21995013	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8977`	vulnerable	2026-06-08 05:08:22.354588	Details available IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This information could be used to mount further attacks against the system. Published: 2017-02-01T22:00:00.000Z Updated: 2024-08-06T02:35:02.890Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/95308 http://www.ibm.com/support/docview.wss?uid=swg21995014	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8967`	vulnerable	2026-06-08 05:08:22.309537	Details available IBM BigFix Inventory v9 9.2 stores user credentials in plain in clear text which can be read by a local user. Published: 2017-02-01T21:00:00.000Z Updated: 2024-08-06T02:35:02.278Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=swg21995019 http://www.securityfocus.com/bid/95902	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8966`	vulnerable	2026-06-08 05:08:22.308839	Details available IBM BigFix Inventory v9 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. Published: 2017-02-01T20:00:00.000Z Updated: 2024-08-06T02:35:02.678Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=swg21995023 http://www.securityfocus.com/bid/95138	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.