GCVE - cpe:2.3:a:ibm_corporation:bigfix_inventory:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm_corporation:bigfix_inventory:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ibm Corporation (`d12a6641-f3f1-52ca-aee3-0e264bbe9c89`)
Product	Bigfix Inventory (`97f89b2e-fca4-50c6-8393-081a147c34fb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-8981`	vulnerable	2026-06-08 05:08:22.355383	Details available IBM BigFix Inventory v9 allows web pages to be stored locally which can be read by another user on the system. Published: 2017-02-01T20:00:00.000Z Updated: 2024-08-06T02:35:02.349Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/95137 http://www.ibm.com/support/docview.wss?uid=swg21994932	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8980`	vulnerable	2026-06-08 05:08:22.354934	Details available IBM BigFix Inventory v9 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. Published: 2017-02-01T20:00:00.000Z Updated: 2024-08-06T02:35:02.296Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/95141 http://www.ibm.com/support/docview.wss?uid=swg21995013	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8977`	vulnerable	2026-06-08 05:08:22.354417	Details available IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This information could be used to mount further attacks against the system. Published: 2017-02-01T22:00:00.000Z Updated: 2024-08-06T02:35:02.890Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/95308 http://www.ibm.com/support/docview.wss?uid=swg21995014	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8967`	vulnerable	2026-06-08 05:08:22.309269	Details available IBM BigFix Inventory v9 9.2 stores user credentials in plain in clear text which can be read by a local user. Published: 2017-02-01T21:00:00.000Z Updated: 2024-08-06T02:35:02.278Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=swg21995019 http://www.securityfocus.com/bid/95902	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8966`	vulnerable	2026-06-08 05:08:22.307121	Details available IBM BigFix Inventory v9 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. Published: 2017-02-01T20:00:00.000Z Updated: 2024-08-06T02:35:02.678Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=swg21995023 http://www.securityfocus.com/bid/95138	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8963`	vulnerable	2026-06-08 05:08:22.303934	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8962`	vulnerable	2026-06-08 05:08:22.303556	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8961`	vulnerable	2026-06-08 05:08:22.298208	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.