Hclsoftware Bigfix Platform vulnerabilities

• hcl software bigfix platform HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID) CVE-2026-108013 6.8 MediumOctober 24, 2026
• hcl software bigfix platform, hclsoftware hcl bigfix platform +1 more HCL BigFix Platform is affected by a user enumeration vulnerability CVE-2026-21840 3.1 LowJuly 14, 2026
• hclsoftware bigfix platform HCL BigFix Platform is affected by insufficient authentication CVE-2026-21767 4.0 MediumApril 1, 2026
• hclsoftware bigfix platform HCL BigFix Platform is affected by insecure permissions on private cryptographic keys CVE-2026-21765 8.8 HighApril 1, 2026
• hcl software bigfix platform HCL BigFix Platform is affected by a DLL Hijack vulnerability CVE-2024-30117 2.5 LowOctober 14, 2024
• hcl software bigfix platform HCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiation CVE-2024-23556 5.9 MediumMay 17, 2024
• hcl software bigfix platform HCL BigFix Platform is susceptible to Cross-Site Request Forgery CVE-2024-23554 5.7 MediumMay 17, 2024
• hcl software bigfix platform HCL BigFix Platform is susceptible to insufficiently protected credentials CVE-2024-23583 6.7 MediumMay 17, 2024
• hcl software bigfix platform HCL BigFix Platform is susceptible to a Denial of Service attack CVE-2023-45715 3.5 LowMarch 28, 2024
• hcl software bigfix platform HCL BigFix Platform is susceptible to Cross Site Scripting (XSS) and/or Man in the Middle (MITM) attack CVE-2023-45706 2.0 LowMarch 28, 2024
• hcl software bigfix platform HCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF) CVE-2023-45705 3.5 LowMarch 28, 2024
• hcl software bigfix platform A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform CVE-2023-37528 6.5 MediumFebruary 3, 2024
• hcl software bigfix platform A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform CVE-2024-23553 3.0 LowFebruary 2, 2024
• hcl software bigfix platform A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform CVE-2023-37531 3.3 LowFebruary 2, 2024
• hcl software bigfix platform A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform CVE-2023-37530 3.0 LowFebruary 2, 2024
• hcl software bigfix platform A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform CVE-2023-37529 3.0 LowFebruary 2, 2024
• hcl software bigfix platform A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform CVE-2023-37527 5.4 MediumFebruary 2, 2024
• hcl software bigfix platform, apache xerces-c\+\+, fedoraproject fedora +2 more HCL BigFix Platform is vulnerable to an integer overflow in xerces-c++ 3.2.3 CVE-2023-37536 Fix available 8.2 HighOctober 11, 2023
• hcl software bigfix platform HCL BigFix Platform is affected by insufficient warnings CVE-2022-42453 6.9 MediumDecember 17, 2022
• hcl software bigfix platform HCL BigFix Platform is affected by insecure credential storage CVE-2022-38659 6.0 MediumDecember 17, 2022
• hcl software bigfix platform HCL BigFix Platform Console is affected by a Privilege Escalation Vulnerability CVE-2021-27767 6.7 MediumMay 6, 2022
• hcl software bigfix platform HCL BigFix Platform Client is affected by a Privilege Escalation Vulnerability CVE-2021-27766 6.7 MediumMay 6, 2022
• hcl software bigfix platform HCL BigFix Platform Server API is affected by Privilege Escalation Vulnerability CVE-2021-27765 6.7 MediumMay 6, 2022
• hcl software bigfix platform HCL BigFix Platform is affected by misconfigured security-related HTTP headers CVE-2021-27762 4.7 MediumMay 6, 2022
• hcl software bigfix platform HCL BigFix Platform is affected by weak web transport security CVE-2021-27761 4.8 MediumMay 6, 2022
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into... CVE-2019-4058 6.5 MediumMay 20, 2019
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows... CVE-2019-4011 5.4 MediumMay 20, 2019
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 stores potentially sensitive information in process memory that... CVE-2018-2005 3.3 LowMay 20, 2019
• hclsoftware bigfix platform IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on... CVE-2019-4013 Public exploit EPSS 13.0% 9.0 CriticalApril 10, 2019
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather... CVE-2019-4061 EPSS 22.5% 5.3 MediumFebruary 27, 2019
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not renew a session variable... CVE-2018-1485 3.1 LowDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the secure attribute... CVE-2018-1484 3.7 LowDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 stores sensitive information in... CVE-2018-1481 3.7 LowDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the 'HttpOnly'... CVE-2018-1480 4.0 MediumDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 could allow a remote attacker to... CVE-2018-1478 6.1 MediumDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 discloses sensitive information to... CVE-2018-1476 5.3 MediumDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 is vulnerable to HTTP response... CVE-2018-1474 6.1 MediumDecember 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.5 - 9.5.9 stores user credentials in plain in clear text which can be read... CVE-2017-1231 4.4 MediumOctober 12, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a... CVE-2018-1600 8.6 HighJune 4, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site request forgery which could allow an... CVE-2018-1479 8.8 HighApril 27, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 uses an inadequate account lockout setting that could allow a... CVE-2018-1475 9.8 CriticalApril 27, 2018
• hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows... CVE-2018-1473 6.1 MediumApril 27, 2018
• hclsoftware bigfix platform IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have... CVE-2017-1221 9.8 CriticalNovember 13, 2017
• hclsoftware bigfix platform IBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash... CVE-2017-1227 7.5 HighJuly 31, 2017
• hclsoftware bigfix platform IBM Tivoli Endpoint Manager could allow a remote attacker to upload arbitrary files. A remote... CVE-2016-0214 7.8 HighFebruary 8, 2017
• hclsoftware bigfix platform IBM BigFix Platform could allow an attacker on the local network to crash the BES and relay servers. CVE-2016-6085 6.5 MediumFebruary 1, 2017
• hclsoftware bigfix platform IBM BigFix Platform could allow an attacker on the local network to crash the BES server using a... CVE-2016-6084 6.5 MediumFebruary 1, 2017
• hclsoftware bigfix platform IBM BigFix Platform could allow a remote attacker to execute arbitrary code on the system, caused... CVE-2016-6082 10.0 CriticalFebruary 1, 2017
• hclsoftware bigfix platform IBM Tivoli Endpoint Manager could allow a user under special circumstances to inject commands... CVE-2016-0396 8.1 HighFebruary 1, 2017
• hclsoftware bigfix platform IBM Tivoli Endpoint Manager - Mobile Device Management (MDM) could allow a remote attacker to... CVE-2016-0297 3.7 LowFebruary 1, 2017
• Show olderLoading…