CVE-2016-8977: IBM Bigfix Inventory

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This information could be used to mount further attacks against the system.

Affected products

• IBM Bigfix Inventory: version 9.2 only
• IBM License Metric Tool: version 9.2.0 only

Published 2017-02-01. Last modified 2026-06-17.