CVE-2017-1521

IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications (IBM BigFix Platform 9.2 and 9.5) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129831.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=swg22009673Patch, Vendor Advisory
• http://www.securityfocus.com/bid/101571Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/129831VDB Entry, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22009673Patch, Vendor Advisory
• http://www.securityfocus.com/bid/101571Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/129831VDB Entry, Vendor Advisory

Published

Oct 26, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15204In Kanboard before 1.0.47, by altering form data, an authent…
• CVE-2017-15205In Kanboard before 1.0.47, by altering form data, an authent…
• CVE-2017-15206In Kanboard before 1.0.47, by altering form data, an authent…
• CVE-2017-15207In Kanboard before 1.0.47, by altering form data, an authent…
• CVE-2017-15208In Kanboard before 1.0.47, by altering form data, an authent…
• CVE-2017-15209In Kanboard before 1.0.47, by altering form data, an authent…
• CVE-2017-15210In Kanboard before 1.0.47, by altering form data, an authent…
• CVE-2017-15211In Kanboard before 1.0.47, by altering form data, an authent…
• CVE-2017-15212In Kanboard before 1.0.47, by altering form data, an authent…
• CVE-2017-15213Stored XSS vulnerability in Flyspray before 1.0-rc6 allows a…
• CVE-2017-15214Stored XSS vulnerability in Flyspray 1.0-rc4 before 1.0-rc6 …
• CVE-2017-15215Reflected XSS vulnerability in Shaarli v0.9.1 allows an unau…