Advisories · Technology
HCL Software BigFix Service Management (SM).
Every CVE that names HCL Software BigFix Service Management (SM) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.9 Low
HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only
- HCL Software BigFix Service Management (SM)
- CWE-1188
- CVSS 4.8 Medium
HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials
- HCL Software BigFix Service Management (SM)
- Information disclosure
- CVSS 4.6 Medium
HCL BigFix Service Management (SM) does not adequately sanitize or safely render
- HCL Software BigFix Service Management (SM)
- Information disclosure
- CVSS 3.5 Low
HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images.
- HCL Software BigFix Service Management (SM)
- CWE-1230
- CVSS 3.7 Low
HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directl
- HCL Software BigFix Service Management (SM)
- Information disclosure
- CVSS 2.6 Low
HCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability.
- HCL Software BigFix Service Management (SM)
- Cross-site request forgery (CSRF)
- CVSS 5.4 Medium
A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix Service Management (SM)
- HCL Software BigFix Service Management (SM)
- Unrestricted file upload
- CVSS 5.3 Medium
A cryptographic weakness has been identified in the HCL BigFix Service Management (SM)
- HCL Software BigFix Service Management (SM)
- Weak cryptography or TLS
- CVSS 6.5 Medium
HCL BigFix Service Management (SM) is affected by a Sensitive Information Exposure vulnerability
- HCL Software BigFix Service Management (SM)
- Weak cryptography or TLS