Bigfix Aex (Hcl Software) - vulnerabilities (CVEs)
6 CVEs, 6 in the last 30 days, 2 known versions, newest CVE from 2026-10-28. Vendor: Hcl Software.
CVEs of Bigfix Aex
- CVE-2026-21830 - CVSS 3.7 (low), 2026-10-28: HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent to unintended or non‐AWS endpoints.
- CVE-2026-67077 - CVSS 4.2 (medium), 2026-10-28: HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the application to send unauthorized…
- CVE-2026-67079 - CVSS 6.4 (medium), 2026-10-28: HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and…
- CVE-2026-67080 - CVSS 6.5 (medium), 2026-10-28: HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an…
- CVE-2026-67073 - CVSS 8.6 (high), 2026-10-28: HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or…
- CVE-2026-67074 - CVSS 9.1 (critical), 2026-10-28: HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application…
