Advisories · Technology
HCL Software BigFix Platform.
Every CVE that names HCL Software BigFix Platform among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID)
- HCL Software BigFix Platform
- Weak cryptography or TLS
- CVSS 2.5 Low
HCL BigFix Platform is affected by a DLL Hijack vulnerability
- HCL Software BigFix Platform
- CWE-427
- CVSS 5.9 Medium
HCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiation
- HCL Software BigFix Platform
- CVSS 5.7 Medium
HCL BigFix Platform is susceptible to Cross-Site Request Forgery
- HCL Software BigFix Platform
- Cross-site request forgery (CSRF)
- CVSS 6.7 Medium
HCL BigFix Platform is susceptible to insufficiently protected credentials
- HCL Software BigFix Platform
- Hard-coded credentials
- CVSS 3.5 Low
HCL BigFix Platform is susceptible to a Denial of Service attack
- HCL Software BigFix Platform
- CWE-436
- CVSS 2.0 Low
HCL BigFix Platform is susceptible to Cross Site Scripting (XSS) and/or Man in the Middle (MITM) attack
- HCL Software BigFix Platform
- Cross-site scripting (XSS)
- CVSS 3.5 Low
HCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF)
- HCL Software BigFix Platform
- Server-side request forgery (SSRF)
- CVSS 6.5 Medium
A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform
- HCL Software BigFix Platform
- Cross-site scripting (XSS)
- CVSS 3.0 Low
A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform
- HCL Software BigFix Platform
- Cross-site scripting (XSS)
- CVSS 3.3 Low
A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform
- HCL Software BigFix Platform
- Cross-site scripting (XSS)
- CVSS 3.0 Low
A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform
- HCL Software BigFix Platform
- Cross-site scripting (XSS)
- CVSS 3.0 Low
A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform
- HCL Software BigFix Platform
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform
- HCL Software BigFix Platform
- Cross-site scripting (XSS)
- CVSS 8.2 High
HCL BigFix Platform is vulnerable to an integer overflow in xerces-c++ 3.2.3
- HCL Software BigFix Platform
- Memory corruption
- CVSS 6.9 Medium
HCL BigFix Platform is affected by insufficient warnings
- HCL Software BigFix Platform
- Authentication bypass
- CVSS 6.0 Medium
HCL BigFix Platform is affected by insecure credential storage
- HCL Software BigFix Platform
- Weak cryptography or TLS
- CVSS 6.7 Medium
HCL BigFix Platform Console is affected by a Privilege Escalation Vulnerability
- HCL Software BigFix Platform
- Privilege escalation
- CVSS 6.7 Medium
HCL BigFix Platform Client is affected by a Privilege Escalation Vulnerability
- HCL Software BigFix Platform
- Privilege escalation
- CVSS 6.7 Medium
HCL BigFix Platform Server API is affected by Privilege Escalation Vulnerability
- HCL Software BigFix Platform
- Privilege escalation
- CVSS 4.7 Medium
HCL BigFix Platform is affected by misconfigured security-related HTTP headers
- HCL Software BigFix Platform
- CVSS 4.8 Medium
HCL BigFix Platform is affected by weak web transport security
- HCL Software BigFix Platform