TI-2012-00662 CVE-2012-0718 · GHSA-fx43-9328-mjm3
IBM Tivoli Endpoint Manager 8 does not set the HttpOnly flag on cookies.
Priority LOW 26
IBM Tivoli Endpoint Manager 8 does not set the HttpOnly flag on cookies.
Vulnerabilities
9 records
TI-2014-05060 CVE-2014-6137 · GHSA-xhr2-j67f-5vh2
Cross-site scripting (XSS) vulnerability in the Relay Diagnostic page in IBM Tivoli…
Priority LOW 24
Cross-site scripting (XSS) vulnerability in the Relay Diagnostic page in IBM Tivoli Endpoint Manager 9.1 before 9.1.1229 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
TI-2014-05041 CVE-2014-6113 · GHSA-ww62-7j8w-g2j7
Cross-site scripting (XSS) vulnerability in the Web Reports component in IBM Tivoli…
Priority LOW 22
Cross-site scripting (XSS) vulnerability in the Web Reports component in IBM Tivoli Endpoint Manager 9.1 before 9.1.1229 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
TI-2014-02448 CVE-2014-3066 · GHSA-gjp7-4gf3-7mvq
IBM Tivoli Endpoint Manager 9.1 before 9.1.1088.0 allows remote attackers to read…
Priority LOW 27
IBM Tivoli Endpoint Manager 9.1 before 9.1.1088.0 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External…
TI-2013-00379 CVE-2013-0452 · GHSA-5jr8-8r92-6cw6
Cross-site request forgery (CSRF) vulnerability in the Software Use Analysis (SUA)…
Priority LOW 31
Cross-site request forgery (CSRF) vulnerability in the Software Use Analysis (SUA) application before 1.3.3 in IBM Tivoli Endpoint Manager 8.2 allows remote attackers to hijack the authentication of arbitrary users via a…
TI-2013-00380 CVE-2013-0453 · GHSA-mjjv-h2rr-wqh2
Cross-site scripting (XSS) vulnerability in Web Reports in IBM Tivoli Endpoint Manager…
Priority LOW 19
Cross-site scripting (XSS) vulnerability in Web Reports in IBM Tivoli Endpoint Manager (TEM) before 8.2.1372 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
TI-2012-04090 CVE-2012-4841 · GHSA-4x9f-qjp9-p2g6
Unspecified vulnerability in Tivoli Endpoint Manager for Remote Control Broker 8.2 before…
Priority LOW 26
Unspecified vulnerability in Tivoli Endpoint Manager for Remote Control Broker 8.2 before 8.2.1-TIV-TEMRC821-IF0002 allows remote attackers to cause a denial of service (resource consumption) via unknown vectors.
TI-2012-01621 CVE-2012-1837 · GHSA-78xm-mxj5-599h
The (1) webreports, (2) post/create-role, and (3) post/update-role programs in IBM Tivoli…
Priority LOW 25
The (1) webreports, (2) post/create-role, and (3) post/update-role programs in IBM Tivoli Endpoint Manager (TEM) before 8.2 do not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for…
TI-2012-00663 CVE-2012-0719 · GHSA-cq9p-jcwj-qcvm
Cross-site scripting (XSS) vulnerability in IBM Tivoli Endpoint Manager (TEM) 8 before…
Priority LOW 22
Cross-site scripting (XSS) vulnerability in IBM Tivoli Endpoint Manager (TEM) 8 before 8.2 patch 3 allows remote attackers to inject arbitrary web script or HTML via the ScheduleParam parameter to the webreports program.