Advisories · Technology

HCL Software HCL BigFix Platform.

Every CVE that names HCL Software HCL BigFix Platform among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-42193 CVE record

CVSS 2.1 Low

HCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attack
- HCL Software HCL BigFix Platform
- Weak cryptography or TLS
Not analysed yet 15 Apr 2025
CVE-2024-42189 CVE record

CVSS 5.6 Medium

HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack
- HCL Software HCL BigFix Platform
- CWE-1287
Not analysed yet 15 Apr 2025
CVE-2024-42200 CVE record

CVSS 4.8 Medium

HCL BigFix Web Reports is potentially susceptible to a Stored Cross-Site Scripting (XSS) attack
- HCL Software HCL BigFix Platform
- Cross-site scripting (XSS)
Not analysed yet 15 Apr 2025
CVE-2023-37520 CVE record

CVSS 7.7 High

HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)
- HCL Software HCL BigFix Platform
Not analysed yet 21 Dec 2023
CVE-2023-37519 CVE record

CVSS 7.7 High

HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)
- HCL Software HCL BigFix Platform
- Cross-site scripting (XSS)
Not analysed yet 21 Dec 2023