GCVE - cpe:2.3:a:ibm:bigfix_compliance:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:bigfix_compliance:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Bigfix Compliance (`2f1b4c94-ced0-59f3-80d7-c33cea2558f9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-1202`	vulnerable	2026-06-08 05:09:21.361773	Details available MEDIUM (5.4) IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 123677. Published: 2019-02-05T18:00:00.000Z Updated: 2024-09-17T01:46:55.527Z Open on db.gcve.eu Reference links https://www-01.ibm.com/support/docview.wss?uid=ibm10737581 https://exchange.xforce.ibmcloud.com/vulnerabilities/123677	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1200`	vulnerable	2026-06-08 05:09:21.359752	Details available LOW (3.7) IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. The software might connect to a malicious host while believing it is a trusted host, or the software might be deceived into accepting spoofed data that appears to originate from a trusted host. IBM X-Force ID: 123675. Published: 2019-02-05T18:00:00.000Z Updated: 2024-09-16T17:03:29.068Z Open on db.gcve.eu Reference links https://www-01.ibm.com/support/docview.wss?uid=ibm10737581 https://exchange.xforce.ibmcloud.com/vulnerabilities/123675	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1198`	vulnerable	2026-06-08 05:09:21.353347	Details available LOW (3.7) IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123673. Published: 2019-02-05T18:00:00.000Z Updated: 2024-09-16T16:58:22.072Z Open on db.gcve.eu Reference links https://www-01.ibm.com/support/docview.wss?uid=ibm10737581 https://exchange.xforce.ibmcloud.com/vulnerabilities/123673	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1177`	vulnerable	2026-06-08 05:09:21.235465	Details available MEDIUM (5.3) IBM BigFix Compliance 1.7 through 1.9.91 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 123429. Published: 2019-02-05T18:00:00.000Z Updated: 2024-09-16T20:17:50.877Z Open on db.gcve.eu Reference links https://www-01.ibm.com/support/docview.wss?uid=ibm10737581 https://exchange.xforce.ibmcloud.com/vulnerabilities/123429	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.