← Back

Bigfix Security Compliance Analytics

bigfix_security_compliance_analytics

Vendor: Ibm • 5 CVEs

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Ibm
1Bigfix Security Compliance Analytics
May 13, 2026
Oct 5, 2017
N/A· v4
7.8 HIGH· v3
2.1 LOW· v2
IBM BigFix Compliance Analytics 1.9.79 (TEMA SUAv1 SCA SCM) stores user credentials in clear text which can be read by a local user. IBM X-Force ID: 123676.
1Ibm
1Bigfix Security Compliance Analytics
May 13, 2026
Jun 15, 2017
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
IBM BigFix Compliance (TEMA SUAv1 SCA SCM) uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 123672.
1Ibm
1Bigfix Security Compliance Analytics
May 13, 2026
Jun 8, 2017
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
IBM BigFix Compliance Analytics 1.9.79 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 123431.
1Ibm
1Bigfix Security Compliance Analytics
May 13, 2026
Jun 7, 2017
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
IBM BigFix Compliance (TEMA SUAv1 SCA SCM) 1.9.70 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123671.
1Ibm
1Bigfix Security Compliance Analytics
May 13, 2026
Jun 7, 2017
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
IBM Endpoint Manager for Security and Compliance 1.9.70 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality pot...Show more
IBM Endpoint Manager for Security and Compliance 1.9.70 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123430.Show less