Vulnerability in Hcl Software Bigfix Insights For Vulnerability Remediation

CVE-2022-44757

BigFix Insights for Vulnerability Remediation (IVR) uses weak cryptography that can lead to credential exposure. An attacker could gain access to sensitive information, modify data in unexpected ways, etc.

Published · last modified .

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N.

EPSS exploit prediction

EPSS: 0.004 (31.4th percentile), scored .

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 31st percentile — 31.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2022-44757: held from 0.003 to 0.004.

EPSS over last 30 days · oldest: 0.003 · newest: 0.004 · change: +0.001

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2022-44757?
CVE-2022-44757 is a medium-severity vulnerability in Hcl Software Bigfix Insights For Vulnerability Remediation, classified under Insufficiently Protected Credentials. CVSS score: 6.5/10. Published 2023-10-11.
How severe is CVE-2022-44757?
Medium severity. CVSS v3 base score is 6.5 out of 10.