CVE-2026-67080

HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensitive technical information, including stack traces, system details, or internal paths, potentially facilitating further...

CVE-2026-67079

HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and trick users into performing unintended actions, potentially leading to unauthorized transactions or changes to their accounts...

CVE-2026-67073

HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or unauthorized files and directly access or download sensitive uploaded content, potentially leading to information disclosure, unauthorized acces...

CVE-2026-67074

HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentially leading to unauthorized access, data exposure, or system compromise...

CVE-2026-67077

HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the application to send unauthorized requests to external resources. Successful exploitation could lead to access to unintended services, sensitive information disclosure, or...

CVE-2026-21830

HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent to unintended or non‐AWS endpoints...

CVE-2026-21830 HCL BigFix AEX is affected by multiple security vulnerabilities.

HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent to unintended or non‐AWS endpoints...

CVE-2026-21830

The HCL BigFix AEX product is affected by a vulnerability within the aws-sdk package. This flaw is caused by Improper Input Validation (CWE-20), which may result in AWS API requests being directed to unintended or non-AWS endpoints . No specific exploit information or remediation steps are provid...

EUVD-2026-112040

HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent to unintended or non‐AWS endpoints...

CVE-2026-67077 HCL BigFix AEX is affected by multiple security vulnerabilities.

HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the application to send unauthorized requests to external resources. Successful exploitation could lead to access to unintended services, sensitive information disclosure, or...

CVE-2026-67077

HCL BigFix AEX is impacted by a Server-Side Request Forgery (SSRF) vulnerability (CWE-918, CWE-441, CWE-610). This flaw allows an attacker to force the application to transmit unauthorized requests to external resources. Consequences of successful exploitation include sensitive information disclo...

EUVD-2026-112033

HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the application to send unauthorized requests to external resources. Successful exploitation could lead to access to unintended services, sensitive information disclosure, or...

CVE-2026-67079 HCL BigFix AEX is affected by multiple security vulnerabilities.

HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and trick users into performing unintended actions, potentially leading to unauthorized transactions or changes to their accounts...

CVE-2026-67079

HCL BigFix AEX is affected by a Clickjacking vulnerability (CWE-1021). This flaw allows an attacker to embed the application within a malicious web page or an iframe , tricking users into performing unintended actions. Such actions could potentially lead to unauthorized transactions or modificati...

EUVD-2026-112032

HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and trick users into performing unintended actions, potentially leading to unauthorized transactions or changes to their accounts...

CVE-2026-67080 HCL BigFix AEX is affected by multiple security vulnerabilities.

HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensitive technical information, including stack traces, system details, or internal paths, potentially facilitating further...

CVE-2026-67080

HCL BigFix AEX is impacted by an Information Disclosure vulnerability caused by the improper handling of errors or exceptional conditions. An attacker could potentially obtain sensitive technical information, such as stack traces , system details , or internal paths , which may facilitate subsequ...

EUVD-2026-112031

HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensitive technical information, including stack traces, system details, or internal paths, potentially facilitating further...

CVE-2026-67073 HCL BigFix AEX is affected by multiple security vulnerabilities.

HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or unauthorized files and directly access or download sensitive uploaded content, potentially leading to information disclosure, unauthorized acces...

CVE-2026-67073

HCL BigFix AEX is impacted by an Unrestricted File Upload and Improper Access Control vulnerability. This flaw allows an attacker to upload malicious or unauthorized files and subsequently access or download sensitive content directly. Such actions could result in information disclosure , unautho...