CVE-2016-0291: IBM Bigfix Platform

High severity, CVSS 8.8. EPSS: 3.8% chance of exploitation in the next 30 days.

IBM BigFix Platform 9.0, 9.1 before 9.1.8, and 9.2 before 9.2.8 allow remote authenticated users to execute arbitrary commands by leveraging report server access. IBM X-Force ID: 111302.

Affected products

• IBM Bigfix Platform: from 9.1, before 9.1.8 (fixed in 9.1.8); from 9.2, before 9.2.8 (fixed in 9.2.8); version 9.0 only

Published 2018-02-28. Last modified 2026-06-17.