Ibm Tivoli Endpoint Manager
9 CVEs affecting Ibm Tivoli Endpoint Manager. Latest disclosed: 2020-02-18. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2012-0718 | Medium | 5.4 | 2020-02-18 | IBM Tivoli Endpoint Manager 8 does not set the HttpOnly flag on cookies. |
CVE-2014-6137 | | 2015-02-16 | Cross-site scripting (XSS) vulnerability in the Relay Diagnostic page in IBM Tivoli Endpoint Manager 9.1 before 9.1.1229 allows remote attackers to inject arbi… | |
CVE-2014-6113 | | 2015-02-16 | Cross-site scripting (XSS) vulnerability in the Web Reports component in IBM Tivoli Endpoint Manager 9.1 before 9.1.1229 allows remote attackers to inject arbi… | |
CVE-2014-3066 | | 2014-07-02 | IBM Tivoli Endpoint Manager 9.1 before 9.1.1088.0 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in con… | |
CVE-2013-0452 | | 2013-03-29 | Cross-site request forgery (CSRF) vulnerability in the Software Use Analysis (SUA) application before 1.3.3 in IBM Tivoli Endpoint Manager 8.2 allows remote at… | |
CVE-2013-0453 | | 2013-03-21 | Cross-site scripting (XSS) vulnerability in Web Reports in IBM Tivoli Endpoint Manager (TEM) before 8.2.1372 allows remote authenticated users to inject arbitr… | |
CVE-2012-4841 | | 2012-11-29 | Unspecified vulnerability in Tivoli Endpoint Manager for Remote Control Broker 8.2 before 8.2.1-TIV-TEMRC821-IF0002 allows remote attackers to cause a denial o… | |
CVE-2012-1837 | | 2012-03-22 | The (1) webreports, (2) post/create-role, and (3) post/update-role programs in IBM Tivoli Endpoint Manager (TEM) before 8.2 do not include the HTTPOnly flag in… | |
CVE-2012-0719 | | 2012-03-22 | Cross-site scripting (XSS) vulnerability in IBM Tivoli Endpoint Manager (TEM) 8 before 8.2 patch 3 allows remote attackers to inject arbitrary web script or HT… |