38 matches found
CVE-2024-42200 HCL BigFix Web Reports is potentially susceptible to a Stored Cross-Site Scripting (XSS) attack
HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting XSS attack, due to a potentially weak validation of user input...
PT-2025-16375
Name of the Vulnerable Software and Affected Versions HCL BigFix Web Reports affected versions not specified Description The issue is related to a weakness in the handling of SSL certificate validation by the HCL BigFix Web Reports' service, which communicates over HTTPS. This weakness presents a...
CVE-2024-42189: Improper Validation of Specified Type of Input
HCL BigFix Web Reports might be subject to a Denial of Service DoS attack, due to a potentially weak validation of an API parameter...
PT-2025-16374
Name of the Vulnerable Software and Affected Versions HCL BigFix Web Reports affected versions not specified Description The issue is related to a potentially weak validation of an API parameter, which might make HCL BigFix Web Reports subject to a Denial of Service DoS attack. Recommendations At...
PT-2025-16376
Name of the Vulnerable Software and Affected Versions HCL BigFix Web Reports affected versions not specified Description The issue is related to a potentially weak validation of user input, which might make HCL BigFix Web Reports subject to a Stored Cross-Site Scripting XSS attack. Recommendation...
CVE-2024-42193: Improper Certificate Validation
HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle MITM attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized acces...
CVE-2024-42200: Improper Neutralization of Input During Web Page Generation
HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting XSS attack, due to a potentially weak validation of user input...
CVE-2022-27544
BigFix Web Reports authorized users may see SMTP credentials in clear text...
CVE-2022-27545
BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page...
CVE-2022-27545
BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page...
PT-2022-18475
Name of the Vulnerable Software and Affected Versions BigFix Web Reports affected versions not specified Description The issue allows authorized users of BigFix Web Reports to see SMTP credentials in clear text. Recommendations At the moment, there is no information about a newer version that...
CVE-2022-27545: Improper Neutralization of Input During Web Page Generation
BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page...
CVE-2022-27544: Insufficiently Protected Credentials
BigFix Web Reports authorized users may see SMTP credentials in clear text...
PT-2022-18476
Name of the Vulnerable Software and Affected Versions BigFix Web Reports affected versions not specified Description The issue allows authorized users of BigFix Web Reports to perform HTML injection on the email administrative configuration page. Recommendations At the moment, there is no...
CVE-2022-27545
BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page...
CVE-2022-27544
BigFix Web Reports authorized users may see SMTP credentials in clear text...
HCL / IBM BigFix Web Reports Detection (HTTP)
HTTP based detection of HCL / IBM BigFix Web Reports. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
