hcl software hcl bigfix platform vulnerabilities and exploits

(subscribe to this query)

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. This XSS vulnerability is in the Download Status Report, which is served by the BigFix Server.

Hcl Software Hcl Bigfix Platform Hcltech Bigfix Platform Hcltech Bigfix Platform 11.0.0

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data exfiltration. This XSS vulnerability is in the Gather Status Report, which is served by the BigFix Relay.

Hcl Software Hcl Bigfix Platform Hcltech Bigfix Platform Hcltech Bigfix Platform 11.0.0

HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack, due to a potentially weak validation of an API parameter.

Hcl Software Hcl Bigfix Platform

HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle (MITM) attacks and data exposure as, if exploited, this vulnerability could potentially le...

Hcl Software Hcl Bigfix Platform

HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially weak validation of user input.

Hcl Software Hcl Bigfix Platform

In specific scenarios, on Windows the operator credentials may be encrypted in a manner that is not completely machine-dependent.

Hcl Software Bigfix Platform Hcltech Bigfix Platform

There are insufficient warnings when a Fixlet is imported by a user. The warning message currently assumes the owner of the script is the logged in user, with insufficient warnings when attempting to run the script.

Hcl Software Bigfix Platform Hcltech Bigfix Platform

An administrative user of WebReports may perform a Server Side Request Forgery (SSRF) exploit through SMTP configuration options.

Hcl Software Bigfix Platform Hcltech Bigfix Platform

A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an malicious user to execute malicious javascript code into a webpage trying to retrieve cookie stored information. This is not the same vulnerability as identified i...

Hcl Software Bigfix Platform Hcltech Bigfix Platform Hcltech Bigfix Platform 11.0.0

A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an malicious user to execute malicious javascript code into a webpage trying to retrieve cookie stored information.

Hcl Software Bigfix Platform Hcltech Bigfix Platform Hcltech Bigfix Platform 11.0.0

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook