hcl software hcl bigfix platform vulnerabilities and exploits

(subscribe to this query)

BigFix Web Reports authorized users may see SMTP credentials in clear text.

Hcl Software Hcl Bigfix Hcltech Bigfix Platform

BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page.

Hcl Software Hcl Bigfix Hcltech Bigfix Platform

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. This XSS vulnerability is in the Download Status Report, which is served by the BigFix Server.

Hcl Software Hcl Bigfix Platform Hcltech Bigfix Platform Hcltech Bigfix Platform 11.0.0

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data exfiltration. This XSS vulnerability is in the Gather Status Report, which is served by the BigFix Relay.

Hcl Software Hcl Bigfix Platform Hcltech Bigfix Platform Hcltech Bigfix Platform 11.0.0

HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack, due to a potentially weak validation of an API parameter.

Hcl Software Hcl Bigfix Platform

HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle (MITM) attacks and data exposure as, if exploited, this vulnerability could potentially le...

Hcl Software Hcl Bigfix Platform

HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially weak validation of user input.

Hcl Software Hcl Bigfix Platform

Weak web transport security (Weak TLS): An attacker may be able to decrypt the data using attacks

Hcl Software Bigfix Platform Hcltech Bigfix Platform

The BigFix Server API installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulner...

Hcl Software Bigfix Platform Hcltech Bigfix Platform

The BigFix Client installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerabil...

Hcl Software Bigfix Platform Hcltech Bigfix Platform

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook