PT-2024-19934 · Hcl · Hcl Bigfix Compliance

Name of the Vulnerable Software and Affected Versions: HCL BigFix Compliance versions 9.x through 11.x Description: Database scanning using a username and password stores the credentials in plaintext or encoded format within files at the endpoint. This has been identified as a significant securit...

CVE-2024-23584 HCL BigFix Asset Discovery is affected by a security vulnerability

The NMAP Importer service​ may expose data store credentials to authorized users of the Windows Registry...

CVE-2024-23584 HCL BigFix Asset Discovery is affected by a security vulnerability

The NMAP Importer service​ may expose data store credentials to authorized users of the Windows Registry...

HCL Technologies BigFix Enterprise Suite 安全漏洞

HCL Technologies BigFix Enterprise Suite is an enterprise-class endpoint management solution from HCL Technologies, Inc. It is used to help organizations effectively manage their endpoint devices, including desktops, laptops, servers, mobile devices, etc. to ensure security, compliance and...

VulnCheck KEV: CVE-2019-4061

IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869...

CVE-2024-23540

The HCL BigFix Inventory server is vulnerable to path traversal which enables an attacker to read internal application files from the Inventory server. The BigFix Inventory server does not properly restrict the served static file...

CVE-2024-23540 HCL BigFix Inventory is vulnerable to path traversal

The HCL BigFix Inventory server is vulnerable to path traversal which enables an attacker to read internal application files from the Inventory server. The BigFix Inventory server does not properly restrict the served static file...

CVE-2024-23540

CVE-2024-23540 : The HCL BigFix Inventory server is vulnerable to a path traversal flaw that allows an attacker to read internal application files by exploiting improper restrictions on served static files. The vulnerability is mapped to CVSS 3.1: Network, Low attack complexity, Privileges Requir...

CVE-2024-23540 HCL BigFix Inventory is vulnerable to path traversal

The HCL BigFix Inventory server is vulnerable to path traversal which enables an attacker to read internal application files from the Inventory server. The BigFix Inventory server does not properly restrict the served static file...

PT-2024-19931 · Hcl · Hcl Bigfix Inventory Server

Name of the Vulnerable Software and Affected Versions: HCL BigFix Inventory server affected versions not specified Description: The issue allows an attacker to perform path traversal, enabling them to read internal application files from the server. This is due to the server not properly...

HCL Technologies HCL BigFix Inventory 安全漏洞

HCL Technologies HCL BigFix Inventory is a software inventory from HCL Technologies, USA. Maintaining software audits reduces security risks through software compliance and utilization management. A security vulnerability exists in the HCL BigFix Inventory server that stems from vulnerability to...

ROS-20240329-22

Vulnerability in the Heerces C++ library of the BigFix Platform IT hardware co-management platform is caused by an integer overflow. Exploitation of the vulnerability could allow an attacker acting remotely, to execute arbitrary code by sending a specially crafted HTTP request...

CVE-2023-45715 HCL BigFix Platform is susceptible to a Denial of Service attack

The console may experience a service interruption when processing file names with invalid characters...

CVE-2023-45715 HCL BigFix Platform is susceptible to a Denial of Service attack

The console may experience a service interruption when processing file names with invalid characters...

CVE-2023-45706 HCL BigFix Platform is susceptible to Cross Site Scripting (XSS) and/or Man in the Middle (MITM) attack

An administrative user of WebReports may perform a Cross Site Scripting XSS and/or Man in the Middle MITM exploit through SAML configuration...

CVE-2023-45706 HCL BigFix Platform is susceptible to Cross Site Scripting (XSS) and/or Man in the Middle (MITM) attack

An administrative user of WebReports may perform a Cross Site Scripting XSS and/or Man in the Middle MITM exploit through SAML configuration...

CVE-2023-45705 HCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF)

An administrative user of WebReports may perform a Server Side Request Forgery SSRF exploit through SMTP configuration options...

CVE-2023-45705 HCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF)

An administrative user of WebReports may perform a Server Side Request Forgery SSRF exploit through SMTP configuration options...

HCL BigFix Platform 安全漏洞

HCL Technologies HCL BigFix Platform is a suite of endpoint security management platforms from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL BigFix Platform that originates from a...

HCL BigFix Platform 代码问题漏洞

HCL Technologies HCL BigFix Platform is a suite of endpoint security management platforms from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in the HCL BigFix Platform that originates from ...