Total
33 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-21767 | 1 Hcltech | 1 Bigfix Platform | 2026-10-26 | N/A | 4.0 MEDIUM |
| HCL BigFix Platform is affected by insufficient authentication. The application might allow users to access sensitive areas of the application without proper authentication. | |||||
| CVE-2026-21765 | 1 Hcltech | 1 Bigfix Platform | 2026-10-26 | N/A | 8.8 HIGH |
| HCL BigFix Platform is affected by insecure permissions on private cryptographic keys. The private cryptographic keys located on a Windows host machine might be subject to overly permissive file system permissions. | |||||
| CVE-2022-27545 | 1 Hcltech | 1 Bigfix Platform | 2026-10-08 | N/A | 4.6 MEDIUM |
| BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page. | |||||
| CVE-2022-27544 | 1 Hcltech | 1 Bigfix Platform | 2026-10-08 | N/A | 5.0 MEDIUM |
| BigFix Web Reports authorized users may see SMTP credentials in clear text. | |||||
| CVE-2024-42200 | 1 Hcltech | 1 Bigfix Platform | 2026-06-17 | N/A | 5.4 MEDIUM |
| HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially weak validation of user input. | |||||
| CVE-2024-42193 | 1 Hcltech | 1 Bigfix Platform | 2026-06-17 | N/A | 8.1 HIGH |
| HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle (MITM) attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized access. | |||||
| CVE-2024-42189 | 1 Hcltech | 1 Bigfix Platform | 2026-06-17 | N/A | 6.5 MEDIUM |
| HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack, due to a potentially weak validation of an API parameter. | |||||
| CVE-2024-30117 | 1 Hcltech | 1 Bigfix Platform | 2026-06-17 | N/A | 2.5 LOW |
| A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file under some circumstances. | |||||
| CVE-2024-23583 | 2 Hcltech, Microsoft | 2 Bigfix Platform, Windows | 2026-06-17 | N/A | 6.7 MEDIUM |
| An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client Deploy Tool on Windows systems. | |||||
| CVE-2024-23556 | 1 Hcltech | 1 Bigfix Platform | 2026-06-17 | N/A | 5.9 MEDIUM |
| SSL/TLS Renegotiation functionality potentially leading to DoS attack vulnerability. | |||||
| CVE-2024-23554 | 1 Hcltech | 1 Bigfix Platform | 2026-06-17 | N/A | 5.7 MEDIUM |
| Cross-Site Request Forgery (CSRF) on Session Token vulnerability that could potentially lead to Remote Code Execution (RCE). | |||||
| CVE-2024-23553 | 1 Hcltech | 1 Bigfix Platform | 2026-06-17 | N/A | 3.0 LOW |
| A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform exists due to missing a specific http header attribute. | |||||
| CVE-2023-45715 | 1 Hcltech | 1 Bigfix Platform | 2026-06-17 | N/A | 3.5 LOW |
| The console may experience a service interruption when processing file names with invalid characters. | |||||
| CVE-2023-45706 | 1 Hcltech | 1 Bigfix Platform | 2026-06-17 | N/A | 2.0 LOW |
| An administrative user of WebReports may perform a Cross Site Scripting (XSS) and/or Man in the Middle (MITM) exploit through SAML configuration. | |||||
| CVE-2023-45705 | 1 Hcltech | 1 Bigfix Platform | 2026-06-17 | N/A | 3.5 LOW |
| An administrative user of WebReports may perform a Server Side Request Forgery (SSRF) exploit through SMTP configuration options. | |||||
| CVE-2023-37536 | 3 Apache, Fedoraproject, Hcltech | 3 Xerces-c\+\+, Fedora, Bigfix Platform | 2026-06-17 | N/A | 8.2 HIGH |
| An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request. | |||||
| CVE-2023-37531 | 1 Hcltech | 1 Bigfix Platform | 2026-06-17 | N/A | 3.3 LOW |
| A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a form field of a webpage by a user with privileged access. | |||||
| CVE-2023-37530 | 1 Hcltech | 1 Bigfix Platform | 2026-06-17 | N/A | 3.0 LOW |
| A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage trying to retrieve cookie stored information. | |||||
| CVE-2023-37529 | 1 Hcltech | 1 Bigfix Platform | 2026-06-17 | N/A | 3.0 LOW |
| A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage trying to retrieve cookie stored information. This is not the same vulnerability as identified in CVE-2023-37530. | |||||
| CVE-2023-37528 | 1 Hcltech | 1 Bigfix Platform | 2026-06-17 | N/A | 6.5 MEDIUM |
| A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attack to exploit an application parameter during execution of the Save Report. | |||||