HCL BigFix

Name: HCL BigFix
Brand: HCL

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

10critical21high39medium3low

updated 2026-10-25

vulnerabilities (179)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-31147US	high7.5	2.24% (83rd)	Exploit	no fix	2022-07-14	2 versions
CVE-2014-5455US	medium6.9	0.95% (61st)	Exploit	no fix	2014-08-25	≤ BES Asset Discovery <111
CVE-2026-3304US	high7.5	0.88% (59th)	Exploit	no fix	2026-02-27	≤ Service Management <27 Hotfix
CVE-2024-13176US	—	0.61% (49th)	Exploit	11.0.4	2025-01-20	2 versions
CVE-2022-32215US	medium6.5	70.2% (99th)	—	10.0.12.0	2022-07-14	< 10.0.12.0
CVE-2022-32209US	medium6.1	30.2% (98th)	—	10.0.10.0	2022-06-24	< 10.0.10.0
CVE-2024-28910US	—	2.81% (86th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-29985US	—	2.42% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28936US	—	2.42% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28934US	—	2.42% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28933US	—	2.42% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28932US	—	2.42% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28931US	—	2.42% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28909US	—	2.42% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28906US	—	2.42% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-29984US	—	2.40% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-29983US	—	2.40% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-29982US	—	2.40% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28929US	—	2.40% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28935US	—	2.36% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28930US	—	2.36% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28908US	—	2.36% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-29048US	—	2.35% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-29047US	—	2.35% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-29046US	—	2.35% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-29044US	—	2.35% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-29043US	—	2.35% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28944US	—	2.35% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28943US	—	2.35% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28942US	—	2.35% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28940US	—	2.35% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28927US	—	2.35% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28914US	—	2.35% (84th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28938US	—	2.33% (83rd)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28937US	—	2.33% (83rd)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28913US	—	2.29% (83rd)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28945US	—	2.27% (83rd)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28939US	—	2.27% (83rd)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28926US	—	2.27% (83rd)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28912US	—	2.27% (83rd)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28941US	—	2.26% (83rd)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2022-30122US	high7.5	2.23% (83rd)	—	10.0.10.0	2022-12-05	< 10.0.10.0
CVE-2024-28915US	—	2.21% (83rd)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2024-28911US	—	2.21% (83rd)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2022-30123US	critical10.0	1.96% (80th)	—	10.0.10.0	2022-12-05	< 10.0.10.0
CVE-2024-29045US	—	1.78% (78th)	—	no fix	2024-04-09	≤ Platform <10.0.12
CVE-2022-21634US	—	1.75% (78th)	—	10.0.12.0	2022-10-18	< 10.0.12.0
CVE-2021-43306US	high7.5	1.52% (74th)	—	no fix	2022-06-02	2 versions
CVE-2025-9086US	—	1.46% (73rd)	—	10.0.15	2025-09-12	2 versions
CVE-2024-21138US	—	1.26% (69th)	—	no fix	2024-07-16	2 versions

showing 50 of 179

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation38 CVEs
CWE-122Heap-based Buffer Overflow26 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor18 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')12 CVEs
CWE-284Improper Access Control10 CVEs
CWE-209Generation of Error Message Containing Sensitive Information7 CVEs
CWE-190Integer Overflow or Wraparound6 CVEs
CWE-404Improper Resource Shutdown or Release6 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)179 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan