Lucene search
K

62 matches found

RedhatCVE
RedhatCVE
added 2026/04/03 5:8 a.m.2 views

CVE-2026-21767

HCL BigFix Platform is affected by insufficient authentication. The application might allow users to access sensitive areas of the application without proper authentication...

4CVSS5.9AI score0.00114EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/02 12:31 a.m.3 views

EUVD-2026-18096

HCL BigFix Platform is affected by insufficient authentication. The application might allow users to access sensitive areas of the application without proper authentication...

4CVSS5.9AI score0.00114EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/04/02 12:0 a.m.9 views

HCL BigFix Platform 安全漏洞

The HCL BigFix Platform is a developed by the Indian company HCL. This platform supports automatic discovery, management, and remediation of endpoint security issues. The HCL BigFix Platform has security vulnerabilities, which stem from insufficient authentication. As a result, users may access...

4CVSS5.8AI score0.00114EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/01 11:47 p.m.2 views

CVE-2026-21767

HCL BigFix Platform is affected by insufficient authentication. The application might allow users to access sensitive areas of the application without proper authentication...

4CVSS5.9AI score0.00114EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/01 11:36 p.m.3 views

CVE-2026-21765 HCL BigFix Platform is affected by insecure permissions on private cryptographic keys

HCL BigFix Platform is affected by insecure permissions on private cryptographic keys. The private cryptographic keys located on a Windows host machine might be subject to overly permissive file system permissions...

8.8CVSS5.9AI score0.00101EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/01 11:36 p.m.1 views

CVE-2026-21765

HCL BigFix Platform is affected by insecure permissions on private cryptographic keys. The private cryptographic keys located on a Windows host machine might be subject to overly permissive file system permissions...

8.8CVSS5.9AI score0.00101EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2025/04/15 12:0 a.m.4 views

HCL BigFix Platform 安全漏洞

HCL BigFix Platform is a suite of endpoint security management platform from HCL India. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL BigFix Platform, which stems from insufficient validation of API...

6.5CVSS6.4AI score0.0024EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/14 10:55 p.m.21 views

CVE-2024-30117 HCL BigFix Platform is affected by a DLL Hijack vulnerability

A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file under some circumstances...

2.5CVSS0.00198EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/10/14 12:0 a.m.4 views

HCL BigFix Platform 安全漏洞

HCL BigFix Platform is a suite of endpoint security management platforms from HCL Corporation, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in the HCL BigFix Platform that stems from the fact that a dynamic...

5.3CVSS6.7AI score0.00198EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/05/17 11:40 p.m.27 views

CVE-2024-23556 HCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiation

SSL/TLS Renegotiation functionality potentially leading to DoS attack vulnerability...

5.9CVSS6.9AI score0.00368EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/17 11:31 p.m.18 views

CVE-2024-23554 HCL BigFix Platform is susceptible to Cross-Site Request Forgery

Cross-Site Request Forgery CSRF on Session Token vulnerability that could potentially lead to Remote Code Execution RCE...

5.7CVSS7.7AI score0.00271EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/05/17 11:31 p.m.16 views

CVE-2024-23554 HCL BigFix Platform is susceptible to Cross-Site Request Forgery

Cross-Site Request Forgery CSRF on Session Token vulnerability that could potentially lead to Remote Code Execution RCE...

5.7CVSS6.1AI score0.00271EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/05/17 11:6 p.m.30 views

CVE-2024-23583 HCL BigFix Platform is susceptible to insufficiently protected credentials

An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client Deploy Tool on Windows systems...

6.7CVSS6.5AI score0.00157EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/03/28 2:26 p.m.37 views

CVE-2023-45715 HCL BigFix Platform is susceptible to a Denial of Service attack

The console may experience a service interruption when processing file names with invalid characters...

3.5CVSS4.4AI score0.004EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/28 2:19 p.m.10 views

CVE-2023-45706 HCL BigFix Platform is susceptible to Cross Site Scripting (XSS) and/or Man in the Middle (MITM) attack

An administrative user of WebReports may perform a Cross Site Scripting XSS and/or Man in the Middle MITM exploit through SAML configuration...

2CVSS6.1AI score0.0026EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/03/28 2:11 p.m.35 views

CVE-2023-45705 HCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF)

An administrative user of WebReports may perform a Server Side Request Forgery SSRF exploit through SMTP configuration options...

3.5CVSS4.5AI score0.00371EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/28 2:11 p.m.15 views

CVE-2023-45705 HCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF)

An administrative user of WebReports may perform a Server Side Request Forgery SSRF exploit through SMTP configuration options...

3.5CVSS7AI score0.00371EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/03/28 12:0 a.m.7 views

HCL BigFix Platform 代码问题漏洞

HCL Technologies HCL BigFix Platform is a suite of endpoint security management platforms from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in the HCL BigFix Platform that originates from ...

7.2CVSS6.8AI score0.00371EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/03/28 12:0 a.m.4 views

HCL BigFix Platform 安全漏洞

HCL Technologies HCL BigFix Platform is a suite of endpoint security management platforms from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in the HCL BigFix Platform that originates from ...

4CVSS6.1AI score0.0026EPSS
Exploits0References2
NVD
NVD
added 2024/02/29 1:40 a.m.18 views

CVE-2023-37529

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage trying to retrieve cookie stored information. This is not the same vulnerability as identified in CVE-2023-37530...

5.4CVSS4.1AI score0.00335EPSS
Exploits0References1
Rows per page
Query Builder