CVE-2022-44757 HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to weak cryptography

BigFix Insights for Vulnerability Remediation IVR uses weak cryptography that can lead to credential exposure. An attacker could gain access to sensitive information, modify data in unexpected ways, etc...

CVE-2022-44757 HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to weak cryptography

BigFix Insights for Vulnerability Remediation IVR uses weak cryptography that can lead to credential exposure. An attacker could gain access to sensitive information, modify data in unexpected ways, etc...

CVE-2022-44758 HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper credential handling

BigFix Insights/IVR fixlet uses improper credential handling within certain fixlet content. An attacker can gain access to information that is not explicitly authorized...

CVE-2022-44758 HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper credential handling

BigFix Insights/IVR fixlet uses improper credential handling within certain fixlet content. An attacker can gain access to information that is not explicitly authorized...

CVE-2022-42451 HCL BigFix Patch Management is vulnerable to insecurely stored credentials

Certain credentials within the BigFix Patch Management Download Plug-ins are stored insecurely and could be exposed to a local privileged user...

CVE-2022-42451 HCL BigFix Patch Management is vulnerable to insecurely stored credentials

Certain credentials within the BigFix Patch Management Download Plug-ins are stored insecurely and could be exposed to a local privileged user...

CVE-2023-28012

HCL BigFix Mobile is vulnerable to a command injection attack. An authenticated attacker could run arbitrary shell commands on the WebUI server...

CVE-2023-28014

HCL BigFix Mobile is vulnerable to a cross-site scripting attack. An authenticated attacker could inject malicious scripts into the application...

CVE-2023-28014

HCL BigFix Mobile is vulnerable to a cross-site scripting attack. An authenticated attacker could inject malicious scripts into the application...

CVE-2023-28012

HCL BigFix Mobile is vulnerable to a command injection attack. An authenticated attacker could run arbitrary shell commands on the WebUI server...

Command injection

HCL BigFix Mobile is vulnerable to a command injection attack. An authenticated attacker could run arbitrary shell commands on the WebUI server...

Cross site scripting

HCL BigFix Mobile is vulnerable to a cross-site scripting attack. An authenticated attacker could inject malicious scripts into the application...

CVE-2023-28014 HCL BigFix Mobile can be affected by a cross-site scripting (XSS) vulnerability

HCL BigFix Mobile is vulnerable to a cross-site scripting attack. An authenticated attacker could inject malicious scripts into the application...

CVE-2023-28014

CVE-2023-28014 affects HCL BigFix Mobile with a cross-site scripting vulnerability. An authenticated attacker could inject malicious scripts into the application. The available materials indicate low/medium impact vectors and that exploitation requires user interaction. No concrete remediation or...

CVE-2023-28014 HCL BigFix Mobile can be affected by a cross-site scripting (XSS) vulnerability

HCL BigFix Mobile is vulnerable to a cross-site scripting attack. An authenticated attacker could inject malicious scripts into the application...

CVE-2023-28012 HCL BigFix Mobile can be affected by a command injection vulnerability

HCL BigFix Mobile is vulnerable to a command injection attack. An authenticated attacker could run arbitrary shell commands on the WebUI server...

CVE-2023-28012 HCL BigFix Mobile can be affected by a command injection vulnerability

HCL BigFix Mobile is vulnerable to a command injection attack. An authenticated attacker could run arbitrary shell commands on the WebUI server...

CVE-2023-28012

CVE-2023-28012 affects HCL BigFix Mobile WebUI server. The vulnerability is a command injection flaw where input is not properly filtered, allowing an authenticated attacker to execute arbitrary shell commands on the WebUI server. Reported impact includes high confidentiality, integrity, and avai...

PT-2023-21480 · Hcl · Hcl Bigfix Mobile

Name of the Vulnerable Software and Affected Versions: HCL BigFix Mobile affected versions not specified Description: The issue allows an authenticated attacker to inject malicious scripts into the application through a cross-site scripting attack. Recommendations: At the moment, there is no...

PT-2023-21478 · Hcl · Hcl Bigfix Mobile

Name of the Vulnerable Software and Affected Versions: HCL BigFix Mobile affected versions not specified Description: The issue allows an authenticated attacker to perform a command injection attack, enabling them to run arbitrary shell commands on the WebUI server. Recommendations: At the moment...