Advisories · Technology
HCL Software BigFix Compliance.
Every CVE that names HCL Software BigFix Compliance among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.8 Low
HCL BigFix Compliance is affected by a missing secure flag on a cookie
- HCL Software BigFix Compliance
- CWE-614
- CVSS 4.7 Medium
HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information
- HCL Software BigFix Compliance
- Information disclosure
- CVSS 5.4 Medium
HCL BigFix Compliance is affected by unvalidated redirects and forwards
- HCL Software BigFix Compliance
- Open redirect
- CVSS 4.7 Medium
HCL BigFix Compliance is affected by a missing X-Frame-Options Header vulnerability
- HCL Software BigFix Compliance
- Cross-site scripting (XSS)
- CVSS 6.2 Medium
HCL BigFix Compliance is affected by an internal server error
- HCL Software BigFix Compliance
- Server-side request forgery (SSRF)
- CVSS 6.5 Medium
HCL BigFix Compliance is potentially affected by Oracle database credentials stored at endpoint
- HCL Software BigFix Compliance
- Hard-coded credentials