Advisories · Technology
HCLSoftware BigFix IVR.
Every CVE that names HCLSoftware BigFix IVR among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.2 Low
HCL BigFix IVR is impacted by an improper service binding configuration
- HCLSoftware BigFix IVR
- Information disclosure
- CWE-419
- CVSS 2.9 Low
HCL BigFix IVR is impacted by improper authentication and missing CSRF protection
- HCLSoftware BigFix IVR
- Authentication bypass
- Cross-site request forgery (CSRF)
- CVSS 2.0 Low
HCL BigFix IVR is impacted by an insufficient session expiration vulnerability
- HCLSoftware BigFix IVR
- Authentication bypass