hcltech bigfix service management

Name: hcltech bigfix service management
Brand: hcltech

productUS

cpe:2.3:a:hcltech:bigfix_service_management:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

4critical4high12medium0low

updated 2026-10-28

vulnerabilities (36)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-67100US	—	0.47% (40th)	—	no fix	2026-09-18	2 versions
CVE-2026-67102US	—	0.35% (28th)	—	no fix	2026-09-18	2 versions
CVE-2026-56592US	critical9.8	0.29% (21st)	—	no fix	2026-09-18	2 versions
CVE-2026-21848US	—	0.27% (19th)	—	no fix	2026-09-18	2 versions
CVE-2026-67101US	medium5.8	0.26% (17th)	—	no fix	2026-09-18	2 versions
CVE-2024-30151US	—	0.25% (16th)	—	no fix	2026-05-06	= 23.0
CVE-2026-67171US	—	0.24% (15th)	—	no fix	2026-10-01	= 27
CVE-2026-67106US	—	0.24% (15th)	—	no fix	2026-10-01	= 27
CVE-2025-31960US	—	0.24% (15th)	—	no fix	2026-05-06	= 23.0
CVE-2026-67104US	—OT elevated	0.24% (14th)	—	no fix	2026-10-01	= 27
CVE-2025-52613US	high8.8	0.23% (14th)	—	no fix	2026-05-06	= 23.0
CVE-2026-67172US	—	0.21% (11th)	—	no fix	2026-10-01	= 27
CVE-2026-67103US	medium6.1	0.20% (10th)	—	no fix	2026-09-18	2 versions
CVE-2026-56589US	—	0.20% (10th)	—	no fix	2026-10-01	= 27
CVE-2026-21806US	critical9.8	0.20% (10th)	—	no fix	2026-09-18	= 27
CVE-2026-56590US	critical9.8	0.19% (9th)	—	no fix	2026-09-18	2 versions
CVE-2025-31973US	critical9.8	0.18% (7th)	—	no fix	2026-05-20	= 23.0
CVE-2025-31974US	high7.2OT elevated	0.18% (7th)	—	no fix	2026-05-06	= 23.0
CVE-2025-31958US	high8.2	0.18% (7th)	—	no fix	2026-04-21	= 23.0
CVE-2025-31975US	medium5.3	0.17% (7th)	—	no fix	2026-05-06	= 23.0
CVE-2026-56597US	medium5.3	0.17% (6th)	—	no fix	2026-09-18	2 versions
CVE-2025-31980US	—	0.16% (6th)	—	no fix	2026-10-01	= 27
CVE-2025-31976US	high7.5	0.16% (5th)	—	no fix	2026-05-06	= 23.0
CVE-2025-31985US	medium6.5	0.16% (5th)	—	no fix	2026-05-20	= 23.0
CVE-2026-67105US	—OT elevated	0.15% (5th)	—	no fix	2026-10-01	= 27
CVE-2025-31982US	medium6.5	0.15% (4th)	—	no fix	2026-05-06	= 23.0
CVE-2026-56595US	medium4.3	0.15% (4th)	—	no fix	2026-09-18	2 versions
CVE-2025-31959US	—	0.14% (4th)	—	no fix	2026-05-06	= 23.0
CVE-2025-31978US	medium4.3	0.14% (3rd)	—	no fix	2026-05-06	= 23.0
CVE-2025-31984US	medium5.4	0.14% (3rd)	—	no fix	2026-05-06	= 23.0
CVE-2025-31983US	medium4.6	0.12% (2nd)	—	no fix	2026-05-06	= 23.0
CVE-2025-31977US	medium6.5OT elevated	0.10% (1st)	—	no fix	2025-08-28	= 23.0
CVE-2025-31957US	medium5.7	0.10% (1st)	—	no fix	2026-05-06	= 23.0
CVE-2025-31972US	—OT elevated	0.09% (1st)	—	no fix	2025-08-28	= 23.0
CVE-2025-31981US	—OT elevated	0.09% (0th)	—	no fix	2026-04-21	= 23.0
CVE-2026-56599US	—	0.06% (0th)	—	no fix	2026-10-01	= 27

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor12 CVEs
CWE-209Generation of Error Message Containing Sensitive Information4 CVEs
CWE-319Cleartext Transmission of Sensitive Information3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-1104Use of Unmaintained Third Party Components1 CVEs
CWE-1188Initialization of a Resource with an Insecure Default1 CVEs
CWE-1230Exposure of Sensitive Information Through Metadata1 CVEs
CWE-20Improper Input Validation1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE36 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan