CVE-2026-67105

The HCL BigFix Service Management software is affected by an Insecure Communication vulnerability (CWE-319). An attacker with internal network access could intercept unencrypted HTTP traffic between backend services. This allows for the extraction of sensitive data and the execution of man-in-the...

EUVD-2026-90876

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...

CVE-2026-67105 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...

EUVD-2026-90874

HCL BigFix Service Management is affected by a Stored Cross-Site Scripting XSS vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data...

CVE-2026-56589 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by a Stored Cross-Site Scripting XSS vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data...

CVE-2026-56589 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by a Stored Cross-Site Scripting XSS vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data...

CVE-2026-56589

The HCL BigFix Service Management application is affected by a Stored Cross-Site Scripting (XSS) vulnerability. An attacker could inject and store malicious scripts within the application, which then execute when a victim views the compromised page. This could lead to session hijacking and the th...

Vehicle-Service-Management-System-Service-Requests-Stored-Cross-Site-Scripting-XSS

CVE-2021-46070 エクスプロイトタイトル: Vehicle Service Management System - 'Service Requests' 保存型クロスサイトスクリプティング XSS エクスプロイト作者: SANU P.L CVE: CVE-2021-46070 CVSS: 4.8 MEDIUM 参照: https://www.plsanu.com/vehicle-service-management-system-service-requests-stored-cross-site-scripting-xss...

Vehicle-Service-Management-System-MyAccount-Stored-Cross-Site-Scripting-XSS

CVE-2021-46068 エクスプロイトタイトル: Vehicle Service Management System - 'MyAccount' 格納型クロスサイトスクリプティング XSS エクスプロイト作成者: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIUM 参考情報: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss...

Vehicle-Service-Management-System-Category-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46071 エクスプロイトタイトル: Vehicle Service Management System - 「カテゴリ一覧」保存型クロスサイトスクリプティング XSS エクスプロイト作成者: SANU P.L CVE: CVE-2021-46071 CVSS: 4.8 MEDIUM 参照: https://www.plsanu.com/vehicle-service-management-system-category-list-stored-cross-site-scripting-xss...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Stored-Cross-Site-Scripting

CVE-2021-46078 Título del Exploit: Vehicle Service Management System - 'Múltiple' Carga de archivos conduce a Cross-Site Scripting Almacenado Autor del Exploit: SANU P.L CVE: CVE-2021-46078 CVSS: 4.8 MEDIO Referencias:...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution

CVE-2021-46076 エクスプロイトタイトル: Vehicle Service Management System - 複数のファイルアップロードによるコード実行 エクスプロイト作成者: SANU P.L CVE: CVE-2021-46076 CVSS: 8.8 HIGH 参考文献: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-code-execution https://nvd.nist.gov/vuln/detail/CVE-2021-46076...

Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS

CVE-2021-46080 エクスプロイトタイトル: Vehicle Service Management System - '複数'のクロスサイトリクエストフォージェリ CSRF が格納型クロスサイトスクリプティング XSS につながる エクスプロイト作者: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 MEDIUM 参照:...

Vehicle-Service-Management-System-User-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46073 エクスプロイトタイトル: Vehicle Service Management System - ユーザーリストにおける格納型クロスサイトスクリプティング XSS エクスプロイト作成者: SANU P.L CVE: CVE-2021-46073 CVSS: 4.8 MEDIUM 参考文献: https://www.plsanu.com/vehicle-service-management-system-user-list-stored-cross-site-scripting-xss...

Vehicle-Service-Management-System-Settings-Stored-Cross-Site-Scripting-XSS

CVE-2021-46074 エクスプロイトのタイトル: Vehicle Service Management System - '設定' 保存型クロスサイトスクリプティング XSS エクスプロイト作成者: SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 MEDIUM 参考文献: https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss...

Vehicle-Service-Management-System-Mechanic-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46069 エクスプロイトタイトル: Vehicle Service Management System - 'Mechanic List' Stored Cross Site Scripting XSS エクスプロイト作者: SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 中 参考文献: https://www.plsanu.com/vehicle-service-management-system-mechanic-list-stored-cross-site-scripting-xss...

PT-2026-103900

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...

CVE-2021-46074

CVE-2021-46074 漏洞标题：车辆服务管理系统 - 'Settings' 存储型跨站脚本（XSS） 漏洞作者：SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 中危 参考链接： https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46074 https://vulners.com/cve/CVE-2021-46074 描述：...

CVE-2021-46069

CVE-2021-46069 エクスプロイトタイトル: Vehicle Service Management System - 'Mechanic List' Stored Cross Site Scripting XSS エクスプロイト作者: SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 MEDIUM 参考文献: https://www.plsanu.com/vehicle-service-management-system-mechanic-list-stored-cross-site-scripting-xss...

CVE-2021-46078

CVE-2021-46078 Exploit Title: Vehicle Service Management System - 'Multiple' ファイルアップロードにより格納型クロスサイトスクリプティングが発生 Exploit Author: SANU P.L CVE: CVE-2021-46078 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-stored-cross-site-scripti...