Hcl Software Bigfix Aex
6 CVEs affecting Hcl Software Bigfix Aex. Latest disclosed: 2026-10-28. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-67074 | Critical | 9.1 | 2026-10-28 | HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or… |
CVE-2026-67073 | High | 8.6 | 2026-10-28 | HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or unauth… |
CVE-2026-67080 | Medium | 6.5 | 2026-10-28 | HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacke… |
CVE-2026-67079 | Medium | 6.4 | 2026-10-28 | HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and tr… |
CVE-2026-67077 | Medium | 4.2 | 2026-10-28 | HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the application to send unauthorized requests… |
CVE-2026-21830 | Low | 3.7 | 2026-10-28 | HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent to unintended or non‐AWS endpoints. |