Hcl Software Hcl Bigfix Service Management
15 CVEs affecting Hcl Software Hcl Bigfix Service Management. Latest disclosed: 2026-10-06. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-67102 | High | 8.1 | 2026-09-18 | HCL BigFix Service Management is affected by a high-severity Broken Access Control vulnerability, which could allow a low-privileged user to gain unauthorized… |
CVE-2026-67105 | High | 7.4 | 2026-10-01 | HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept u… |
CVE-2026-56589 | High | 7.2 | 2026-10-01 | HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scr… |
CVE-2026-56592 | Medium | 6.5 | 2026-09-18 | HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an u… |
CVE-2026-56590 | Medium | 6.4 | 2026-09-18 | HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthent… |
CVE-2026-67171 | Medium | 5.3 | 2026-10-01 | HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint exposes sensitive internal database inform… |
CVE-2026-67106 | Medium | 5.3 | 2026-10-01 | HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data. This information… |
CVE-2026-67104 | Medium | 5.3 | 2026-10-01 | HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly accessi… |
CVE-2026-21848 | Medium | 5.0 | 2026-09-18 | HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access… |
CVE-2025-31980 | Medium | 4.3 | 2026-10-01 | HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data in… |
CVE-2026-67172 | Low | 3.7 | 2026-10-01 | HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive information in error messages when inval… |
CVE-2026-56596 | Low | 3.5 | 2026-10-06 | HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data… |
CVE-2026-56597 | Low | 3.1 | 2026-09-18 | HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal I… |
CVE-2026-56595 | Low | 3.1 | 2026-09-18 | HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker to… |
CVE-2026-56599 | Low | 2.2 | 2026-10-01 | HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to exploit missing securit… |