Bigfix Mobile Security Vulnerabilities and Issues — Bigfix Mobile CVE List

Lucene search

HcltechBigfix Mobile

3 matches found

CVE•added 2023/01/20 7:15 a.m.•39 views

CVE-2021-27782

HCL BigFix Mobile / Modern Client Management Admin and Config UI passwords can be brute-forced.User should be locked out for multiple invalid attempts.

7.5CVSS6.5AI score0.00167EPSS

CVE•added 2023/07/27 12:15 a.m.•38 views

CVE-2023-28012

HCL BigFix Mobile is vulnerable to a command injection attack. An authenticated attacker could run arbitrary shell commands on the WebUI server.

8.8CVSS7.4AI score0.00499EPSS

CVE•added 2023/07/27 12:15 a.m.•37 views

CVE-2023-28014

HCL BigFix Mobile is vulnerable to a cross-site scripting attack. An authenticated attacker could inject malicious scripts into the application.

6.6CVSS5.3AI score0.00108EPSS