Lucene search
+L

1480 matches found

CNNVD
CNNVD
added 2022/07/19 12:0 a.m.6 views

HCL Technologies HCL BigFix Platform 跨站脚本漏洞

HCL Technologies HCL BigFix Platform is a suite of endpoint security management platform from HCL Technologies, India. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL Technologies HCL BigFix Platform version...

5.4CVSS6.6AI score0.00317EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/07/18 12:36 p.m.2 views

CVE-2022-27545

BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page...

5.4CVSS5.8AI score0.00317EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/07/18 12:16 p.m.7 views

CVE-2022-27544

BigFix Web Reports authorized users may see SMTP credentials in clear text...

6.5CVSS5.8AI score0.0043EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/05/27 4:15 p.m.38 views

CVE-2021-27781 HCL BigFix Mobile / Modern Client Management is vulnerable to stored cross-site scripting

The Master operator may be able to embed script tag in HTML with alert pop-up display cookie...

6.6CVSS6.5AI score0.00418EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/05/27 4:15 p.m.31 views

CVE-2021-27780 HCL BigFix Mobile / Modern Client Management is vulnerable to unauthenticated XML interaction

The software may be vulnerable to both Un-Auth XML interaction and unauthenticated device enrollment...

5.3CVSS5.6AI score0.00717EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/05/27 12:0 a.m.7 views

HCL Technologies BigFix Mobile/Modern Client Management 跨站脚本漏洞

HCL Technologies BigFix Mobile/Modern Client Management is a mobile device management software client from HCL Technologies, India. A cross-site scripting vulnerability exists in HCL Technologies BigFix Mobile / Modern Client Management v1.x, v2.0, which can be exploited by an attacker to pop up ...

6.6CVSS5AI score0.00418EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/05/27 12:0 a.m.5 views

HCL Technologies BigFix Mobile/Modern Client Management 代码问题漏洞

HCL Technologies BigFix Mobile/Modern Client Management is a mobile device management software client from HCL Technologies, India. A security vulnerability exists in HCL Technologies BigFix Mobile/Modern Client Management v1.x, v2.0, which can be exploited by attackers to conduct Un-Auth XML...

5.3CVSS5.8AI score0.00717EPSS
SaveExploits0References3
CNVD
CNVD
added 2022/05/27 12:0 a.m.43 views

HCL Technologies BigFix Mobile/Modern Client Management信息泄露漏洞

HCL Technologies BigFix Mobile/Modern Client Management is a mobile device management software client from HCL Technologies, India. Management versions v2.0 and v2.1 contain an information disclosure vulnerability that stems from the exposure of unencrypted sensitive information in PPKG files...

4CVSS1.1AI score0.00353EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
added 2022/05/25 3:20 p.m.24 views

CVE-2021-27783 HCL BigFix Mobile / Modern Client Management is vulnerable to sensitive information exposure

User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed...

6.8CVSS6.8AI score0.00353EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/05/09 12:0 a.m.15 views

HCL BigFix Platform Elevation of Privilege Vulnerability

HCL BigFix Platform is an endpoint security management platform. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL BigFix Client. An attacker exploits the vulnerability to perform elevation of privilege...

7.8CVSS6.8AI score0.00187EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/05/09 12:0 a.m.13 views

HCL BigFix Platform Console Elevation of Privilege Vulnerability

HCL BigFix Platform is an endpoint security management platform. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in the HCL BigFix Platform Console. An attacker exploited the vulnerability to perform elevation of...

7.8CVSS6.8AI score0.00187EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/05/09 12:0 a.m.19 views

HCL BigFix Platform elevation of privilege vulnerability (CNVD-2022-38161)

HCL BigFix Platform is an endpoint security management platform. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL BigFix Platform. An attacker exploits the vulnerability to perform elevation of privilege...

7.8CVSS6.8AI score0.00333EPSS
SaveExploits1References1
OSV
OSV
added 2022/05/06 6:15 p.m.5 views

CVE-2021-27766

The BigFix Client installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed...

7.8CVSS7.1AI score
SaveExploits0References2
OSV
OSV
added 2022/05/06 6:15 p.m.3 views

CVE-2021-27765

The BigFix Server API installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed...

7.8CVSS7.1AI score0.00333EPSS
SaveExploits1References2
OSV
OSV
added 2022/05/06 6:15 p.m.6 views

CVE-2021-27767

The BigFix Console installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed...

7.8CVSS7.1AI score0.00187EPSS
SaveExploits0References2
NVD
NVD
added 2022/05/06 6:15 p.m.29 views

CVE-2021-27767

The BigFix Console installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed...

7.8CVSS0.00187EPSS
SaveExploits0References2
NVD
NVD
added 2022/05/06 6:15 p.m.31 views

CVE-2021-27766

The BigFix Client installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed...

7.8CVSS0.00187EPSS
SaveExploits0References2
NVD
NVD
added 2022/05/06 6:15 p.m.22 views

CVE-2021-27765

The BigFix Server API installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed...

7.8CVSS0.00333EPSS
SaveExploits1References2
Prion
Prion
added 2022/05/06 6:15 p.m.29 views

Privilege escalation

The BigFix Client installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed...

4.6CVSS7.3AI score0.0028EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/05/06 6:15 p.m.23 views

Privilege escalation

The BigFix Server API installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed...

4.6CVSS7.3AI score0.00333EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder