hcltech bigfix platform vulnerabilities and exploits

(subscribe to this query)

A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform exists due to missing a specific http header attribute.

Hcl Software Bigfix Platform Hcltech Bigfix Platform Hcltech Bigfix Platform 11.0.0

A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attack to exploit an application parameter during execution of the Save Report.

Hcl Software Bigfix Platform Hcltech Bigfix Platform Hcltech Bigfix Platform 11.0.0

A reflected cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an malicious user to execute malicious javascript code in the application session or in database, via remote injection, while rendering content in a web pag...

Hcl Software Bigfix Platform Hcltech Bigfix Platform Hcltech Bigfix Platform 11.0.0

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. This XSS vulnerability is in the Download Status Report, which is served by the BigFix Server.

Hcl Software Hcl Bigfix Platform Hcltech Bigfix Platform Hcltech Bigfix Platform 11.0.0

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data exfiltration. This XSS vulnerability is in the Gather Status Report, which is served by the BigFix Relay.

Hcl Software Hcl Bigfix Platform Hcltech Bigfix Platform Hcltech Bigfix Platform 11.0.0

SSL/TLS Renegotiation functionality potentially leading to DoS attack vulnerability.

Hcltech Bigfix Platform 9.5 Hcltech Bigfix Platform 10.0.0 Hcltech Bigfix Platform 11.0.1 Hcl Software Bigfix Platform

An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client Deploy Tool on Windows systems.

Hcltech Bigfix Platform 9.5 Hcltech Bigfix Platform 10.0.0 Hcltech Bigfix Platform 11.0.1 Hcl Software Bigfix Platform

"BigFix Platform is storing clear text credentials within the system's memory. An attacker who is able to gain administrative privileges can use a program to create a memory dump and extract the credentials. These credentials can be used to pivot further into the enviro...

* "hcl Bigfix Platform"Hcltech Bigfix Platform

Weak web transport security (Weak TLS): An attacker may be able to decrypt the data using attacks

Hcl Software Bigfix Platform Hcltech Bigfix Platform

The BigFix Server API installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulner...

Hcl Software Bigfix Platform Hcltech Bigfix Platform

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook