Bigfix Inventory (Hcltech) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2024-04-03. Vendor: Hcltech.

CVEs of Bigfix Inventory

• CVE-2024-23540 - CVSS 5.3 (medium), 2024-04-03: The HCL BigFix Inventory server is vulnerable to path traversal which enables an attacker to read internal application files from the Inventory server. The…
• CVE-2021-27759 - CVSS 6.5 (medium), 2022-05-06: This vulnerability arises because the application allows the user to perform some sensitive action without verifying that the request was sent intentionally.…
• CVE-2021-27758 - CVSS 6.5 (medium), 2022-05-06: There is a security vulnerability in login form related to Cross-site Request Forgery which prevents user to login after attacker spam to login and system…