Hcltech Bigfix_webui
7 CVEs affecting Hcltech Bigfix_webui. Latest disclosed: 2023-07-18. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-27764 | High | 7.4 | 2022-05-06 | Cookie without HTTPONLY flag set. NUMBER cookie(s) was set without Secure or HTTPOnly flags. The images show the cookie with the missing flag. (WebUI) |
CVE-2022-38655 | Medium | 6.4 | 2022-12-21 | BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of fixlets or to deploy fixlets from the BES S… |
CVE-2023-28021 | Medium | 5.9 | 2023-07-18 | The BigFix WebUI uses weak cipher suites. |
CVE-2023-28019 | Medium | 5.5 | 2023-07-18 | Insufficient validation in Bigfix WebUI API App site version < 14 allows an authenticated WebUI user to issue SQL queries via an unparameterized SQL query. |
CVE-2020-4104 | Medium | 5.4 | 2020-07-17 | HCL BigFix WebUI is vulnerable to stored cross-site scripting (XSS) within the Apps->Software module. An attacker can use XSS to send a malicious script to an… |
CVE-2023-28023 | Medium | 4.9 | 2023-07-18 | A cross site request forgery vulnerability in the BigFix WebUI Software Distribution interface site version 44 and before allows an NMO attacker to access file… |
CVE-2023-28020 | Medium | 4.7 | 2023-07-18 | URL redirection in Login page in HCL BigFix WebUI allows malicious user to redirect the client browser to an external site via redirect URL response header. |