Bigfix Insights For Vulnerability Remediation (Hcltech) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2026-01-07. Vendor: Hcltech.

CVEs of Bigfix Insights For Vulnerability Remediation

• CVE-2025-31962 - CVSS 4.3 (medium), 2026-01-07: Insufficient session expiration in the Web UI authentication component in HCL BigFix IVR version 4.2 allows an authenticated attacker to gain prolonged…
• CVE-2025-31964 - CVSS 4.9 (medium), 2026-01-07: Improper service binding configuration in internal service components in HCL BigFix IVR version 4.2 allows a privileged attacker to impact service…
• CVE-2025-31963 - CVSS 3.3 (low), 2026-01-07: Improper authentication and missing CSRF protection in the local setup interface component in HCL BigFix IVR version 4.2 allows a local attacker to perform…
• CVE-2022-44758 - CVSS 6.5 (medium), 2023-10-11: BigFix Insights/IVR fixlet uses improper credential handling within certain fixlet content. An attacker can gain access to information that is not explicitly…
• CVE-2022-44757 - CVSS 8.2 (high), 2023-10-11: BigFix Insights for Vulnerability Remediation (IVR) uses weak cryptography that can lead to credential exposure. An attacker could gain access to sensitive…