IBM Bigfix Platform vulnerabilities, page 3

44 vulnerabilities

Known vulnerabilities in IBM Bigfix Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4CVE-2019-4011ibmbigfix_platform
EPSS score
0.66%
IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155885.5.3CVE-2019-4061ibmbigfix_platform
EPSS score
22.55%
IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869.9.9CVE-2019-4013ibmbigfix_platform
EPSS score
13.00%
IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root privileges. This results in code execution on underlying system with root privileges. IBM X-Force ID: 155887.6.5CVE-2019-4058ibmbigfix_platform
EPSS score
0.91%
IBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into exposing interface elements and information normally restricted to administrators. IBM X-Force ID: 156570.