CVE-2017-1203

CVE-2017-1203: vulnerability in IBM BigFix family

Published 19 Jul 2017 · Updated 17 Sep 2024

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.3%

IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123678.

Affected products

IBM · BigFix family

Related CVEs — IBM BigFix family

In the same product, most dangerous first.

CVE-2017-1219—CVE-2017-1219EPSS 2.1%CVE-2017-1223—CVE-2017-1223EPSS 1.4%CVE-2017-1224—CVE-2017-1224EPSS 1.3%CVE-2017-1229—CVE-2017-1229EPSS 1.2%CVE-2017-1218—CVE-2017-1218EPSS 0.9%

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/123678 http://www.ibm.com/support/docview.wss?uid=swg22005246 http://www.ibm.com/support/docview.wss?uid=swg22006014 http://www.securityfocus.com/bid/99916