Bigfix Compliance

bigfix_compliance

Vendor: Ibm • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-1202 1Ibm 1Bigfix Compliance Nov 21, 2024 Feb 5, 2019 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within t...Show more IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 123677.Show less
CVE-2017-1200 1Ibm 1Bigfix Compliance Nov 21, 2024 Feb 5, 2019 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM)...Show more IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. The software might connect to a malicious host while believing it is a trusted host, or the software might be deceived into accepting spoofed data that appears to originate from a trusted host. IBM X-Force ID: 123675.Show less
CVE-2017-1198 1Ibm 1Bigfix Compliance Nov 21, 2024 Feb 5, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, refer...Show more IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123673.Show less
CVE-2017-1177 1Ibm 1Bigfix Compliance Nov 21, 2024 Feb 5, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM BigFix Compliance 1.7 through 1.9.91 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 123429.