CVE-2017-1219: IBM Bigfix Platform

Medium severity, CVSS 6.5. EPSS: 2.1% chance of exploitation in the next 30 days.

IBM Tivoli Endpoint Manager is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 123859.

Affected products

• IBM Bigfix Platform: version 9.1 only; version 9.1.3 only; version 9.1.4 only; version 9.1.5 only; version 9.1.6 only; version 9.1.7 only; …

Published 2017-07-19. Last modified 2026-06-17.