IBM Endpoint Manager Family vulnerabilities

5 CVEs affecting IBM Endpoint Manager Family, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-8927, published 2015-05-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-8927, published 2015-05-25. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. Common Inventory Technology (CIT) before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis 9; and Tivoli Asset Discovery for Distributed 7.2.2 and 7.5…
CVE-2014-8926, published 2015-05-25. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. Common Inventory Technology (CIT) before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis 9; and Tivoli Asset Discovery for Distributed 7.2.2 and 7.5…
CVE-2015-1915, published 2015-05-25. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. The Endpoint Manager for Remote Control component in IBM Tivoli Endpoint Manager for Lifecycle Management 9.0.1 before IF6 and 9.1.0 before IF6 does not set the secure flag for the session cookie in…
CVE-2014-4778, published 2015-05-25. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. IBM License Metric Tool 9 before 9.1.0.2 and Endpoint Manager for Software Use Analysis 9 before 9.1.0.2 do not send an X-Frame-Options HTTP header in response to requests for the login page, which…
CVE-2014-4774, published 2015-05-25. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in the login page in IBM License Metric Tool 9 before 9.1.0.2 and Endpoint Manager for Software Use Analysis 9 before 9.1.0.2 allows remote attackers…