Bigfix Service Management (Hcltech) - vulnerabilities (CVEs)

36 CVEs, 8 in the last 30 days, 8 known versions, newest CVE from 2026-10-01. Vendor: Hcltech.

CVEs of Bigfix Service Management

CVE-2025-31980 - CVSS 4.3 (medium), 2026-10-01: HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data…
CVE-2026-67172 - CVSS 3.7 (low), 2026-10-01: HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive information in error messages when…
CVE-2026-67171 - CVSS 5.3 (medium), 2026-10-01: HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint exposes sensitive internal database…
CVE-2026-67106 - CVSS 5.3 (medium), 2026-10-01: HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data. This information…
CVE-2026-56599 - CVSS 2.2 (low), 2026-10-01: HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to exploit missing…
CVE-2026-67104 - CVSS 5.3 (medium), 2026-10-01: HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly…
CVE-2026-67105 - CVSS 7.4 (high), 2026-10-01: HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept…
CVE-2026-56589 - CVSS 7.2 (high), 2026-10-01: HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious…
CVE-2026-21806 - CVSS 9.8 (critical), 2026-09-18: HCL BigFix Service Management is affected by an Administrative Session Concurrency vulnerability. The application allows multiple simultaneous authenticated…
CVE-2026-56595 - CVSS 4.3 (medium), 2026-09-18: HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker…
CVE-2026-56597 - CVSS 5.3 (medium), 2026-09-18: HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal…
CVE-2026-56592 - CVSS 9.8 (critical), 2026-09-18: HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an…
CVE-2026-56590 - CVSS 9.8 (critical), 2026-09-18: HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an…
CVE-2026-21848 - CVSS 5 (medium), 2026-09-18: HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access…
CVE-2026-67103 - CVSS 7.6 (high), 2026-09-18: HCL BigFix Service Management is affected by Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject unsanitized malicious scripts…
CVE-2026-67102 - CVSS 8.1 (high), 2026-09-18: HCL BigFix Service Management is affected by a high-severity Broken Access Control vulnerability, which could allow a low-privileged user to gain unauthorized…
CVE-2026-67100 - CVSS 9.8 (critical), 2026-09-18: HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities. which could allow an authenticated…
CVE-2026-67101 - CVSS 9.3 (critical), 2026-09-18: HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability in its search functionality, which could allow an attacker to…
CVE-2025-31985 - CVSS 6.5 (medium), 2026-05-20: HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header. This could allow…
CVE-2025-31973 - CVSS 9.8 (critical), 2026-05-20: HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'. Using outdated or insecure base images may…
CVE-2025-31960 - CVSS 5.3 (medium), 2026-05-06: HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module. It was observed that…
CVE-2024-30151 - CVSS 8.3 (high), 2026-05-06: HCL BigFix Service Management (SX) is affected by a Broken Access Control vulnerability leading to privilege escalation. This could allow unauthorized users…
CVE-2025-31974 - CVSS 7.2 (high), 2026-05-06: HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only. An improperly configured root file system may allow…
CVE-2025-52613 - CVSS 8.8 (high), 2026-05-06: HCL BigFix Service Management (SM) is affected by use of a vulnerable WSGI Server was identified. Deploying an outdated or insecure WSGI server may expose the…
CVE-2025-31984 - CVSS 5.4 (medium), 2026-05-06: HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header. This could allow…
CVE-2025-31983 - CVSS 4.6 (medium), 2026-05-06: HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header. This could allow attackers to inject malicious…
CVE-2025-31976 - CVSS 7.5 (high), 2026-05-06: HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while communicating with a backend, internal…
CVE-2025-31982 - CVSS 6.5 (medium), 2026-05-06: HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directly. This could allow an increased risk…
CVE-2025-31978 - CVSS 4.6 (medium), 2026-05-06: HCL BigFix Service Management (SM) does not adequately sanitize or safely render spreadsheet files (CSV, XLS, XLSX) before processing or distributing them. An…
CVE-2025-31957 - CVSS 5.7 (medium), 2026-05-06: HHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. This could lead to unauthorized changes or exposure of…
CVE-2025-31975 - CVSS 5.3 (medium), 2026-05-06: HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified. Exposed server banners may reveal software…
CVE-2025-31959 - CVSS 3.5 (low), 2026-05-06: HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. This could lead to confidentiality and privacy risks if…
CVE-2025-31981 - CVSS 5.3 (medium), 2026-04-21: HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption due to port 80 (HTTP) being open, allowing unencrypted access. An…
CVE-2025-31958 - CVSS 8.2 (high), 2026-04-21: HCL BigFix Service Management is susceptible to HTTP Request Smuggling. HTTP request smuggling vulnerabilities arise when websites route HTTP requests…
CVE-2025-31977 - CVSS 6.5 (medium), 2025-08-28: HCL BigFix SM is affected by cryptographic weakness due to weak or outdated encryption algorithms. An attacker with network access could exploit this…
CVE-2025-31972 - CVSS 6.5 (medium), 2025-08-28: HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker…