DeutschShown in its original language — a full translation is planned for a future version.
HCL BigFix: Mehrere Schwachstellen
view advisory published 2026-10-01
Ein Angreifer kann mehrere Schwachstellen in HCL BigFix ausnutzen, um Informationen offenzulegen, um Daten zu manipulieren und um einen Cross-Site Scripting Angriff durchzuführen.
01
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-56596US | — | — | ||
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing e… | ||||
| CVE-2026-67172US | — | — | ||
HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive information in error messages when invalid inputs are sent to… | ||||
| CVE-2026-67171US | — | — | ||
HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint exposes sensitive internal database information. This informati… | ||||
| CVE-2025-31980US | — | — | ||
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, e… | ||||
| CVE-2026-67106US | — | — | ||
HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data. This information could enable an attac… | ||||
| CVE-2026-67105US | —OT elevated | — | ||
HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traff… | ||||
| CVE-2026-67104US | —OT elevated | — | ||
HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly accessible JavaScript files,… | ||||
| CVE-2026-56599US | — | — | ||
HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to exploit missing security attributes such as… | ||||
| CVE-2026-56589US | — | — | ||
HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the appli… | ||||
| CVE-2024-39338US | high7.5 | — | ||
axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs. | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan