Bigfix Modern Client Management (Hcltech) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2025-10-16. Vendor: Hcltech.

CVEs of Bigfix Modern Client Management

• CVE-2025-0277 - CVSS 6.5 (medium), 2025-10-16: HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could trick users into…
• CVE-2025-0276 - CVSS 6.5 (medium), 2025-10-16: HCL BigFix Modern Client Management (MCM) 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker…
• CVE-2025-0275 - CVSS 5.3 (medium), 2025-10-16: HCL BigFix Mobile 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially…
• CVE-2025-0274 - CVSS 5.3 (medium), 2025-10-16: HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint…
• CVE-2023-28025 - CVSS 6.6 (medium), 2023-12-21: Due to this vulnerability, the Master operator could potentially incorporate an SVG tag into HTML, leading to an alert pop-up displaying a cookie. To mitigate…
• CVE-2021-27783 - CVSS 6.8 (medium), 2022-05-25: User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed.