Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
Docs
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
hcl software hcl bigfix platform vulnerabilities and exploits
(subscribe to this query)
7.8
CVSSv3
CVE-2021-27767
The BigFix Console installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerabi...
Hcl Software Bigfix Platform
Hcltech Bigfix Platform
7.8
CVSSv3
CVE-2022-38659
In specific scenarios, on Windows the operator credentials may be encrypted in a manner that is not completely machine-dependent.
Hcl Software Bigfix Platform
Hcltech Bigfix Platform
9.8
CVSSv3
CVE-2021-27762
Misconfigured security-related HTTP headers: Several security-related headers were missing or mis-configured on the web responses
Hcl Software Bigfix Platform
Hcltech Bigfix Platform
6.5
CVSSv3
CVE-2022-42453
There are insufficient warnings when a Fixlet is imported by a user. The warning message currently assumes the owner of the script is the logged in user, with insufficient warnings when attempting to run the script.
Hcl Software Bigfix Platform
Hcltech Bigfix Platform
7.2
CVSSv3
CVE-2023-45705
An administrative user of WebReports may perform a Server Side Request Forgery (SSRF) exploit through SMTP configuration options.
Hcl Software Bigfix Platform
Hcltech Bigfix Platform
4.8
CVSSv3
CVE-2023-37531
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an malicious user to execute malicious javascript code into a form field of a webpage by a user with privileged access.
Hcl Software Bigfix Platform
Hcltech Bigfix Platform
Hcltech Bigfix Platform 11.0.0
5.4
CVSSv3
CVE-2023-37529
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an malicious user to execute malicious javascript code into a webpage trying to retrieve cookie stored information. This is not the same vulnerability as identified i...
Hcl Software Bigfix Platform
Hcltech Bigfix Platform
Hcltech Bigfix Platform 11.0.0
5.4
CVSSv3
CVE-2023-37530
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an malicious user to execute malicious javascript code into a webpage trying to retrieve cookie stored information.
Hcl Software Bigfix Platform
Hcltech Bigfix Platform
Hcltech Bigfix Platform 11.0.0
5.9
CVSSv3
CVE-2024-23556
SSL/TLS Renegotiation functionality potentially leading to DoS attack vulnerability.
Hcltech Bigfix Platform 9.5
Hcltech Bigfix Platform 10.0.0
Hcltech Bigfix Platform 11.0.1
Hcl Software Bigfix Platform
6.7
CVSSv3
CVE-2024-23583
An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client Deploy Tool on Windows systems.
Hcltech Bigfix Platform 9.5
Hcltech Bigfix Platform 10.0.0
Hcltech Bigfix Platform 11.0.1
Hcl Software Bigfix Platform
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
adp application developer platform 应用开发者平台
type confusion
flir
CVE-2025-6268
overflow
dir-825
CVE-2025-6018
CVE-2025-2783
CVE-2025-6292
webassembly
authentication bypass
CVE-2025-4479
CVE-2025-6306
Home
/
Search Results
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
NEXT »