Hcltech Bigfix Compliance vulnerabilities

• hclsoftware bigfix compliance HCL BigFix Compliance is vulnerable to a sensitive information disclosure CVE-2023-37525 5.3 MediumJanuary 28, 2026
• hcl bigfix compliance HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment CVE-2024-42213 5.3 MediumMay 5, 2025
• hcl bigfix compliance HCL BigFix Compliance is affected by an improper or missing SameSite attribute CVE-2024-42212 5.4 MediumMay 5, 2025
• hcl software bigfix compliance HCL BigFix Compliance is affected by a missing secure flag on a cookie CVE-2024-30142 3.8 LowNovember 7, 2024
• hcl software bigfix compliance HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information CVE-2024-30141 4.7 MediumNovember 7, 2024
• hcl software bigfix compliance HCL BigFix Compliance is affected by unvalidated redirects and forwards CVE-2024-30140 5.4 MediumNovember 7, 2024
• hcl software bigfix compliance HCL BigFix Compliance is affected by a missing X-Frame-Options Header vulnerability CVE-2024-30126 4.7 MediumJuly 18, 2024
• hcl software bigfix compliance HCL BigFix Compliance is affected by an internal server error CVE-2024-30125 6.2 MediumJuly 18, 2024
• hcl software bigfix compliance HCL BigFix Compliance is potentially affected by Oracle database credentials stored at endpoint CVE-2024-23551 6.5 MediumMay 7, 2024
• hcltech bigfix compliance "TLS-RSA cipher suites are not disabled in BigFix Compliance up to v2.0.5. If TLS 2.0 and secure... CVE-2021-27756 7.5 HighMarch 4, 2022