CVE-2021-27762

Misconfigured security-related HTTP headers: Several security-related headers were missing or mis-configured on the web responses

CVE-2022-27545

BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page.

CVE-2022-27544

BigFix Web Reports authorized users may see SMTP credentials in clear text.

CVE-2021-27761

Weak web transport security (Weak TLS): An attacker may be able to decrypt the data using attacks