1985 matches found
IBM BigFix Platform - Information Disclosure
IBM BigFix Platform 9.2 and 9.5 contains an information disclosure vulnerability caused by not enabling authenticated access in relay, letting remote attackers query and gather update and fixlet information, exploit requires no authentication. id: CVE-2019-4061 info: name: IBM BigFix Platform -...
BigFix-CopyFail-AlmaLinux-Content
This repository does not have a README...
CVE-2021-44228-Log4j
Test this content before applying it to production systems. Usage Download the latest package from releases here: https://github.com/VerveIndustrialProtection/CVE-2021-44228-Log4j/releases and then Import the Fixlets, Analyses, and Computer Group into a site and apply computer subscriptions...
CVE-2026-108018
The BigFix MCM admin portal is directly accessible from the internet without VPN or network restriction. A client-side configuration file discloses non-sensitive environment details. Exposing the configuration file publicly increases the attack surface and the risk of unauthorized access attempts...
CVE-2026-108018 BigFix Mobile is affected by sensitive information disclosure
The BigFix MCM admin portal is directly accessible from the internet without VPN or network restriction. A client-side configuration file discloses non-sensitive environment details. Exposing the configuration file publicly increases the attack surface and the risk of unauthorized access attempts...
CVE-2026-108018
The BigFix MCM admin portal is vulnerable to sensitive information disclosure because it is directly accessible from the internet without VPN or network restrictions. A client-side configuration file publicly exposes non-sensitive environment details, which increases the attack surface and the ri...
CVE-2026-108018 BigFix Mobile is affected by sensitive information disclosure
The BigFix MCM admin portal is directly accessible from the internet without VPN or network restriction. A client-side configuration file discloses non-sensitive environment details. Exposing the configuration file publicly increases the attack surface and the risk of unauthorized access attempts...
EUVD-2026-118000
The BigFix MCM admin portal is directly accessible from the internet without VPN or network restriction. A client-side configuration file discloses non-sensitive environment details. Exposing the configuration file publicly increases the attack surface and the risk of unauthorized access attempts...
CVE-2026-65022
The BigFix Mobile MDM App Catalog / App Store preview is vulnerable to Cross-Site Scripting (XSS) . The software fails to properly sanitize or encode user-supplied HTML before rendering it, allowing injected HTML to be displayed to users. This may result in XSS execution when a user interacts wit...
CVE-2026-65022 BigFix Mobile is affected by a Cross-site scripting vulnerability
The MDM App Catalog / App Store preview does not properly sanitize or encode user-supplied HTML before rendering it. Injected HTML can be displayed to users who view the preview, which may allow cross-site scripting XSS when a user interacts with the crafted content...
CVE-2026-65022 BigFix Mobile is affected by a Cross-site scripting vulnerability
The MDM App Catalog / App Store preview does not properly sanitize or encode user-supplied HTML before rendering it. Injected HTML can be displayed to users who view the preview, which may allow cross-site scripting XSS when a user interacts with the crafted content...
PT-2026-137865
Name of the Vulnerable Software and Affected Versions BigFix MCM affected versions not specified Description The admin portal is directly accessible from the internet without VPN or network restrictions. Additionally, a client-side configuration file discloses non-sensitive environment details,...
HCL BigFix Server 10.0.x <= 10.0.16 / 11.0.x <= 11.0.7 Certificate Validation (KB0134758)
The version of HCL BigFix Server installed on the remote host is 10.0.x through 10.0.16 or 11.0.x through 11.0.7. It is, therefore, affected by a vulnerability in the bundled CA certificate store: - BigFix Platform uses Mozilla CA certificate bundle PEM. Versions of the bundle dated before...
HCL BigFix Client 10.0.x <= 10.0.16 / 11.0.x <= 11.0.7 Certificate Validation (KB0134758)
The version of HCL BigFix Client installed on the remote host is 10.0.x through 10.0.16 or 11.0.x through 11.0.7. It is, therefore, affected by a vulnerability in the bundled CA certificate store: - BigFix Platform uses Mozilla CA certificate bundle PEM. Versions of the bundle dated before...
CVE-2026-67073
HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or unauthorized files and directly access or download sensitive uploaded content, potentially leading to information disclosure, unauthorized acces...
CVE-2026-67080
HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensitive technical information, including stack traces, system details, or internal paths, potentially facilitating further...
CVE-2026-67077
HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the application to send unauthorized requests to external resources. Successful exploitation could lead to access to unintended services, sensitive information disclosure, or...
CVE-2026-67079
HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and trick users into performing unintended actions, potentially leading to unauthorized transactions or changes to their accounts...
CVE-2026-67074
HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentially leading to unauthorized access, data exposure, or system compromise...