Vulnerabilities > IBM > Bigfix Security Compliance Analytics > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-06-08 CVE-2017-1179 Inadequate Encryption Strength vulnerability in IBM Bigfix Security Compliance Analytics 1.9.70
IBM BigFix Compliance Analytics 1.9.79 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
network
high complexity
ibm CWE-326
5.9
2017-06-07 CVE-2017-1178 Cross-site Scripting vulnerability in IBM Bigfix Security Compliance Analytics 1.9.70
IBM Endpoint Manager for Security and Compliance 1.9.70 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
6.1