Product by Hcl Software

    Bigfix Platform

    22 known vulnerabilities in Bigfix Platform (Hcl Software), 0 of them actively exploited (CISA KEV).

    Key figures

    22

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Bigfix Platform (Hcl Software)
    HighCVE-2023-37536

    HCL BigFix Platform is vulnerable to an integer overflow in xerces-c++ 3.2.3

    also in 3 other products

    		8.2
    MediumCVE-2026-108013

    HCL Software BigFix Platform: security vulnerability

    also in 1 other product

    		6.8
    CriticalCVE-2021-27762

    HCL BigFix Platform is affected by misconfigured security-related HTTP headers

    also in 1 other product

    		4.7
    MediumCVE-2023-37528

    A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

    also in 1 other product

    		6.5
    HighCVE-2024-23556

    HCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiation

    also in 1 other product

    		5.9
    HighCVE-2021-27765

    HCL BigFix Platform Server API is affected by Privilege Escalation Vulnerability

    also in 1 other product

    		6.7
    MediumCVE-2022-42453

    HCL BigFix Platform is affected by insufficient warnings

    also in 1 other product

    		6.9
    MediumCVE-2024-23583

    HCL BigFix Platform is susceptible to insufficiently protected credentials

    also in 1 other product

    		6.7
    MediumCVE-2023-37527

    A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

    also in 1 other product

    		5.4
    HighCVE-2024-23554

    HCL BigFix Platform is susceptible to Cross-Site Request Forgery

    also in 1 other product

    		5.7
    HighCVE-2021-27767

    HCL BigFix Platform Console is affected by a Privilege Escalation Vulnerability

    also in 1 other product

    		6.7
    HighCVE-2021-27766

    HCL BigFix Platform Client is affected by a Privilege Escalation Vulnerability

    also in 1 other product

    		6.7
    HighCVE-2021-27761

    HCL BigFix Platform is affected by weak web transport security

    also in 1 other product

    		4.8
    HighCVE-2022-38659

    HCL BigFix Platform is affected by insecure credential storage

    also in 1 other product

    		6.0
    MediumCVE-2023-45715

    HCL BigFix Platform is susceptible to a Denial of Service attack

    also in 1 other product

    		3.5
    HighCVE-2023-45705

    HCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF)

    also in 1 other product

    		3.5
    MediumCVE-2023-37531

    A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

    also in 1 other product

    		3.3
    MediumCVE-2023-37530

    A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

    also in 1 other product

    		3.0
    MediumCVE-2023-37529

    A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

    also in 1 other product

    		3.0
    MediumCVE-2024-23553

    A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

    also in 1 other product

    		3.0
    MediumCVE-2024-30117

    HCL BigFix Platform is affected by a DLL Hijack vulnerability

    also in 1 other product

    		2.5
    MediumCVE-2023-45706

    HCL Software BigFix Platform: Cross-Site Scripting (XSS)

    also in 1 other product

    		2.0

    All products by Hcl Software