Hcl Bigfix Service Management (Hcl Software) - vulnerabilities (CVEs)

19 CVEs, 9 in the last 30 days, 3 known versions, newest CVE from 2026-10-06. Vendor: Hcl Software.

CVEs of Hcl Bigfix Service Management

• CVE-2026-56596 - CVSS 3.5 (low), 2026-10-06: HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data,…
• CVE-2025-31980 - CVSS 4.3 (medium), 2026-10-01: HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data…
• CVE-2026-67172 - CVSS 3.7 (low), 2026-10-01: HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive information in error messages when…
• CVE-2026-67171 - CVSS 5.3 (medium), 2026-10-01: HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint exposes sensitive internal database…
• CVE-2026-67106 - CVSS 5.3 (medium), 2026-10-01: HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data. This information…
• CVE-2026-56599 - CVSS 2.2 (low), 2026-10-01: HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to exploit missing…
• CVE-2026-67104 - CVSS 5.3 (medium), 2026-10-01: HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly…
• CVE-2026-67105 - CVSS 7.4 (high), 2026-10-01: HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept…
• CVE-2026-56589 - CVSS 7.2 (high), 2026-10-01: HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious…
• CVE-2026-21806 - CVSS 9.8 (critical), 2026-09-18: HCL BigFix Service Management is affected by an Administrative Session Concurrency vulnerability. The application allows multiple simultaneous authenticated…
• CVE-2026-56595 - CVSS 4.3 (medium), 2026-09-18: HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker…
• CVE-2026-56597 - CVSS 5.3 (medium), 2026-09-18: HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal…
• CVE-2026-56592 - CVSS 9.8 (critical), 2026-09-18: HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an…
• CVE-2026-56590 - CVSS 9.8 (critical), 2026-09-18: HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an…
• CVE-2026-21848 - CVSS 5 (medium), 2026-09-18: HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access…
• CVE-2026-67103 - CVSS 7.6 (high), 2026-09-18: HCL BigFix Service Management is affected by Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject unsanitized malicious scripts…
• CVE-2026-67102 - CVSS 8.1 (high), 2026-09-18: HCL BigFix Service Management is affected by a high-severity Broken Access Control vulnerability, which could allow a low-privileged user to gain unauthorized…
• CVE-2026-67100 - CVSS 9.8 (critical), 2026-09-18: HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities. which could allow an authenticated…
• CVE-2026-67101 - CVSS 9.3 (critical), 2026-09-18: HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability in its search functionality, which could allow an attacker to…