CVE-2026-56620 HCL BigFix Mobile is vulnerable to information disclosure

HCL BigFix Mobile is vulnerable to information disclosure due to improper handling of exceptions and verbose error reporting...

CVE-2026-56620

Technical details such as affected products, versions, root cause, or exploit information are not publicly provided in the supplied documents. Monitor for updates from official disclosures.

CVE-2026-56620 HCL BigFix Mobile is vulnerable to information disclosure

HCL BigFix Mobile is vulnerable to information disclosure due to improper handling of exceptions and verbose error reporting...

CVE-2026-56620

HCL BigFix Mobile is vulnerable to information disclosure due to improper handling of exceptions and verbose error reporting...

CVE-2026-56619: Improper Neutralization of Input During Web Page Generation

HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting Reflected XSS due to insufficient validation and output encoding of user-controlled input...

CVE-2026-56620: Generation of Error Message Containing Sensitive Information

HCL BigFix Mobile is vulnerable to information disclosure due to improper handling of exceptions and verbose error reporting...

PT-2026-69859

Name of the Vulnerable Software and Affected Versions HCL BigFix Mobile affected versions not specified Description HCL BigFix Mobile is subject to information disclosure resulting from verbose error reporting and the improper handling of exceptions. This occurs when the system provides too much...

PT-2026-69858

HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting Reflected XSS due to insufficient validation and output encoding of user-controlled input...

CVE-2026-21766

The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials. Under certain very specific use cases and specific configurations, sensitive information may be written to web server logs. This only affects applications using the default...

CVE-2026-21766 HCL Digital Experience and Digital Experience Compose insufficiently protects credentials

The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials. Under certain very specific use cases and specific configurations, sensitive information may be written to web server logs. This only affects applications using the default...

CVE-2026-21766

CVE-2026-21766 affects the default login portlet in HCL Digital Experience and Digital Experience Compose. It describes insufficient protection of credentials, with the potential for sensitive information to be written to web server logs under specific use cases/configurations. The connected reco...

CVE-2026-21766

The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials. Under certain very specific use cases and specific configurations, sensitive information may be written to web server logs. This only affects applications using the default...

CVE-2026-21766 HCL Digital Experience and Digital Experience Compose insufficiently protects credentials

The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials. Under certain very specific use cases and specific configurations, sensitive information may be written to web server logs. This only affects applications using the default...

CVE-2026-70433

Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2026-70433

Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2026-70433

Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2026-70433

The Jenkins HCL AppScan Plugin versions 1.8.3 and earlier are vulnerable to missing permission checks in multiple HTTP endpoints. Attackers possessing Overall/Read permission can exploit this flaw to enumerate credentials IDs of those stored in Jenkins. These IDs can be leveraged to facilitate su...

EUVD-2026-53527

Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

PT-2026-68314

Name of the Vulnerable Software and Affected Versions HCL Digital Experience affected versions not specified HCL Digital Experience Compose affected versions not specified Description The default login portlet insufficiently protects credentials. Under specific configurations and use cases,...

CVE-2026-21766: Insufficiently Protected Credentials

The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials. Under certain very specific use cases and specific configurations, sensitive information may be written to web server logs. This only affects applications using the default...