CVE-2017-1218: IBM Tivoli Endpoint Manager is vulnerable to cross-site request forgery which could allow an attacker to ex...

Security readout for executives and security teams

CVE-2017-1218 is a cross-site request forgery issue in IBM Tivoli Endpoint Manager, part of the BigFix family. A malicious site could cause a trusted, logged-in user’s browser to send unauthorized actions to the application. The sources do not provide CVSS scoring, detailed impact, or confirmed active exploitation. Exposure is most likely where IBM Tivoli Endpoint Manager or BigFix 9.2/9.5 administrative web interfaces remain deployed, especially if privileged users access them through browsers that can reach untrusted content. Prioritize this for environments still running affected IBM endpoint management platforms. The issue is not reported as actively exploited in the provided sources, but the product’s administrative role means unauthorized actions could have meaningful operational impact. Mitigation focus: Review IBM advisory swg22005246 and X-Force ID 123858 for vendor remediation.; Identify and upgrade or retire affected BigFix/Tivoli Endpoint Manager 9.2 and 9.5 deployments.; Limit administrative interface access to trusted networks and managed devices..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.