CVE-2016-0293
EUVD-2016-032801.09.2016, 01:59
Cross-site scripting (XSS) vulnerability in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.1.8 and 9.2.x before 9.2.8 allows remote attackers to inject arbitrary web script or HTML via a modified .beswrpt file.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | bigfix_platform | 9.2.0 |
| ibm | bigfix_platform | 9.2.1 |
| ibm | bigfix_platform | 9.2.2 |
| ibm | bigfix_platform | 9.2.3 |
| ibm | bigfix_platform | 9.2.4 |
| ibm | bigfix_platform | 9.2.5 |
| ibm | bigfix_platform | 9.2.6 |
| ibm | bigfix_platform | 9.2.7 |
| ibm | bigfix_platform | 9.0.5 |
| ibm | bigfix_platform | 9.0.6 |
| ibm | bigfix_platform | 9.0.7 |
| ibm | bigfix_platform | 9.0.8 |
| ibm | bigfix_platform | 9.1.3 |
| ibm | bigfix_platform | 9.1.4 |
| ibm | bigfix_platform | 9.1.5 |
| ibm | bigfix_platform | 9.1.6 |
| ibm | bigfix_platform | 9.1.7 |
𝑥
= Vulnerable software versions