Skip to contentHcl Bigfix vulnerabilities
- hcl bigfix mobile, hclsoftware hcl bigfix mobile +1 moreHCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS)CVE-2026-566195.4 Medium
- hcl bigfix mobile, hclsoftware hcl bigfix mobile +1 moreHCL BigFix Mobile is vulnerable to information disclosureCVE-2026-566204.3 Medium
- hcl bigfix complianceHCL BigFix Compliance is affected by inclusion of temporary files left in the production environmentCVE-2024-422135.3 Medium
- hcl bigfix complianceHCL BigFix Compliance is affected by an improper or missing SameSite attributeCVE-2024-422125.4 Medium
- hcl bigfix mobileHCL BigFix Mobile can be affected by a cross-site scripting (XSS) vulnerabilityCVE-2023-280146.6 Medium
- hcl bigfix mobileHCL BigFix Mobile can be affected by a command injection vulnerabilityCVE-2023-280125.4 Medium
- hcl bigfix webuiBigFix WebUI is vulnerable to use of a risky cryptographic algorithmCVE-2023-280215.9 Medium
- hcl bigfix webuiURL redirection affects BigFix WebUICVE-2023-280204.7 Medium
- hcl bigfix, hcltech bigfix platform +1 moreHCL BigFix Web Reports authorized users may perform HTML injection.CVE-2022-275454.6 Medium
- hcl bigfix, hcltech bigfix platform +1 moreHCL BigFix Web Reports authorized users may see sensitive information in clear textCVE-2022-275445.0 Medium
- hcl bigfix webuiHCL BigFix WebUI Cookie missing attributesCVE-2021-277647.4 High
- hcl bigfix inventoryThis vulnerability arises because the application allows the user to perform some sensitive...CVE-2021-277592.3 Low
- hcl bigfix inventoryThere is a security vulnerability in login form related to Cross-site Request Forgery which...CVE-2021-277584.3 Medium
- hcl bigfix inventory, hcltech bigfix platform +1 moreBigFix Inventory up to v10.0.2 does not set the secure flag for the session cookie in an https...CVE-2020-142485.3 Medium
- hcl bigfix inventory, hcltech bigfix platform +1 moreTLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2. If TLS 2.0 and...CVE-2020-142547.5 High
- hcl bigfix webuiHCL BigFix WebUI is vulnerable to stored cross-site scripting (XSS) within the Apps->Software...CVE-2020-41045.4 Medium