Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:bigfix_platform:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductBigfix Platform (015c23f1-9272-529a-81b4-b93c94e110a6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-4061 vulnerable 2026-06-08 05:13:56.765762 Details available
MEDIUM (5.3)
IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869.
Published: 2019-02-27T22:00:00.000Z
Updated: 2024-09-17T03:34:21.480Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4058 vulnerable 2026-06-08 05:13:56.758397 Details available
MEDIUM (6.5)
IBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into exposing interface elements and information normally restricted to administrators. IBM X-Force ID: 156570.
Published: 2019-05-20T17:25:23.427Z
Updated: 2024-09-16T23:25:41.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4013 vulnerable 2026-06-08 05:13:56.630829 Details available
CRITICAL (9)
IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root privileges. This results in code execution on underlying system with root privileges. IBM X-Force ID: 155887.
Published: 2019-04-10T14:30:27.523Z
Updated: 2024-09-16T18:19:17.253Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4011 vulnerable 2026-06-08 05:13:56.626496 Details available
MEDIUM (5.4)
IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155885.
Published: 2019-05-20T17:25:23.378Z
Updated: 2024-09-17T03:54:27.491Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-2005 vulnerable 2026-06-08 05:11:29.912469 Details available
LOW (3.3)
IBM BigFix Platform 9.2 and 9.5 stores potentially sensitive information in process memory that could be read by a local attacker with elevated permissions. IBM X-Force ID: 155007
Published: 2019-05-20T17:25:23.312Z
Updated: 2024-09-17T00:01:56.088Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1600 vulnerable 2026-06-08 05:11:18.449905 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1485 vulnerable 2026-06-08 05:11:18.301077 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1484 vulnerable 2026-06-08 05:11:18.300610 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1481 vulnerable 2026-06-08 05:11:18.290145 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1480 vulnerable 2026-06-08 05:11:18.289827 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1479 vulnerable 2026-06-08 05:11:18.289506 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1478 vulnerable 2026-06-08 05:11:18.289125 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1476 vulnerable 2026-06-08 05:11:18.288791 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1475 vulnerable 2026-06-08 05:11:18.288440 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1474 vulnerable 2026-06-08 05:11:18.288009 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1473 vulnerable 2026-06-08 05:11:18.287571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1231 vulnerable 2026-06-08 05:09:21.435580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1227 vulnerable 2026-06-08 05:09:21.434142 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1221 vulnerable 2026-06-08 05:09:21.431639 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0295 vulnerable 2026-06-08 05:07:14.903056 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0291 vulnerable 2026-06-08 05:07:14.896831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.