hcl software bigfix platform vulnerabilities and exploits

(subscribe to this query)

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. This XSS vulnerability is in the Download Status Report, which is served by the BigFix Server.

Hcl Software Hcl Bigfix Platform Hcltech Bigfix Platform Hcltech Bigfix Platform 11.0.0

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data exfiltration. This XSS vulnerability is in the Gather Status Report, which is served by the BigFix Relay.

Hcl Software Hcl Bigfix Platform Hcltech Bigfix Platform Hcltech Bigfix Platform 11.0.0

BigFix Web Reports authorized users may see SMTP credentials in clear text.

Hcl Software Hcl Bigfix Hcltech Bigfix Platform

BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page.

Hcl Software Hcl Bigfix Hcltech Bigfix Platform

Weak web transport security (Weak TLS): An attacker may be able to decrypt the data using attacks

Hcl Software Bigfix Platform Hcltech Bigfix Platform

The BigFix Server API installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulner...

Hcl Software Bigfix Platform Hcltech Bigfix Platform

The BigFix Client installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerabil...

Hcl Software Bigfix Platform Hcltech Bigfix Platform

The BigFix Console installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerabi...

Hcl Software Bigfix Platform Hcltech Bigfix Platform

In specific scenarios, on Windows the operator credentials may be encrypted in a manner that is not completely machine-dependent.

Hcl Software Bigfix Platform Hcltech Bigfix Platform

Misconfigured security-related HTTP headers: Several security-related headers were missing or mis-configured on the web responses

Hcl Software Bigfix Platform Hcltech Bigfix Platform

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook