Hcltech Bigfix Platform vulnerabilities

• hclsoftware bigfix platform HCL BigFix Platform is affected by insufficient authentication CVE-2026-21767 4.0 MediumApril 1, 2026
• hclsoftware bigfix platform HCL BigFix Platform is affected by insecure permissions on private cryptographic keys CVE-2026-21765 8.8 HighApril 1, 2026
• hcl software bigfix platform HCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attack CVE-2024-42193 2.1 LowApril 15, 2025
• hcl software bigfix platform HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack CVE-2024-42189 5.6 MediumApril 15, 2025
• hcl software bigfix platform HCL BigFix Web Reports is potentially susceptible to a Stored Cross-Site Scripting (XSS) attack CVE-2024-42200 4.8 MediumApril 15, 2025
• hcl software bigfix platform HCL BigFix Platform is affected by a DLL Hijack vulnerability CVE-2024-30117 2.5 LowOctober 14, 2024
• hcl software bigfix platform HCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiation CVE-2024-23556 5.9 MediumMay 17, 2024
• hcl software bigfix platform HCL BigFix Platform is susceptible to Cross-Site Request Forgery CVE-2024-23554 5.7 MediumMay 17, 2024
• hcl software bigfix platform HCL BigFix Platform is susceptible to insufficiently protected credentials CVE-2024-23583 6.7 MediumMay 17, 2024
• hcl software bigfix platform HCL BigFix Platform is susceptible to a Denial of Service attack CVE-2023-45715 3.5 LowMarch 28, 2024
• hcl software bigfix platform HCL BigFix Platform is susceptible to Cross Site Scripting (XSS) and/or Man in the Middle (MITM) attack CVE-2023-45706 2.0 LowMarch 28, 2024
• hcl software bigfix platform HCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF) CVE-2023-45705 3.5 LowMarch 28, 2024
• hcl software bigfix platform A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform CVE-2023-37528 6.5 MediumFebruary 3, 2024
• hcl software bigfix platform A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform CVE-2024-23553 3.0 LowFebruary 2, 2024
• hcl software bigfix platform A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform CVE-2023-37531 3.3 LowFebruary 2, 2024
• hcl software bigfix platform A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform CVE-2023-37530 3.0 LowFebruary 2, 2024
• hcl software bigfix platform A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform CVE-2023-37529 3.0 LowFebruary 2, 2024
• hcl software bigfix platform A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform CVE-2023-37527 5.4 MediumFebruary 2, 2024
• hcl software bigfix platform HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS) CVE-2023-37520 7.7 HighDecember 21, 2023
• hcl software bigfix platform HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS) CVE-2023-37519 7.7 HighDecember 21, 2023
• hcl software bigfix platform, apache xerces-c\+\+, fedoraproject fedora +2 more HCL BigFix Platform is vulnerable to an integer overflow in xerces-c++ 3.2.3 CVE-2023-37536 Fix available 8.2 HighOctober 11, 2023
• hcl software bigfix platform HCL BigFix Platform is affected by insufficient warnings CVE-2022-42453 6.9 MediumDecember 17, 2022
• hcl software bigfix platform HCL BigFix Platform is affected by insecure credential storage CVE-2022-38659 6.0 MediumDecember 17, 2022
• hcl bigfix, hcltech bigfix platform +1 more HCL BigFix Web Reports authorized users may perform HTML injection. CVE-2022-27545 4.6 MediumJuly 19, 2022
• hcl bigfix, hcltech bigfix platform +1 more HCL BigFix Web Reports authorized users may see sensitive information in clear text CVE-2022-27544 5.0 MediumJuly 19, 2022
• hcl software bigfix platform HCL BigFix Platform Console is affected by a Privilege Escalation Vulnerability CVE-2021-27767 6.7 MediumMay 6, 2022
• hcl software bigfix platform HCL BigFix Platform Client is affected by a Privilege Escalation Vulnerability CVE-2021-27766 6.7 MediumMay 6, 2022
• hcl software bigfix platform HCL BigFix Platform Server API is affected by Privilege Escalation Vulnerability CVE-2021-27765 6.7 MediumMay 6, 2022
• hcl software bigfix platform HCL BigFix Platform is affected by misconfigured security-related HTTP headers CVE-2021-27762 4.7 MediumMay 6, 2022
• hcl software bigfix platform HCL BigFix Platform is affected by weak web transport security CVE-2021-27761 4.8 MediumMay 6, 2022
• hcl bigfix inventory, hcltech bigfix platform +1 more BigFix Inventory up to v10.0.2 does not set the secure flag for the session cookie in an https... CVE-2020-14248 5.3 MediumDecember 16, 2020
• hcl bigfix inventory, hcltech bigfix platform +1 more TLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2. If TLS 2.0 and... CVE-2020-14254 7.5 HighDecember 16, 2020
• hcltech bigfix platform "BigFix Platform is storing clear text credentials within the system's memory. An attacker who is... CVE-2020-4095 6.0 MediumJuly 16, 2020