Product by Hcl Software

    Hcl Bigfix Service Management

    19 known vulnerabilities in Hcl Bigfix Service Management (Hcl Software), 0 of them actively exploited (CISA KEV).

    Key figures

    19

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Hcl Bigfix Service Management (Hcl Software)
    CriticalCVE-2026-67100

    HCL BigFix Service Management: SQL Injection

    also in 3 other products

    		9.8
    CriticalCVE-2026-67101

    HCL BigFix Service Management: Server-Side Request Forgery (SSRF)

    also in 3 other products

    		9.3
    HighCVE-2026-67102

    HCL BigFix Service Management: Improper Authorization

    also in 3 other products

    		8.1
    HighCVE-2026-67105

    HCL BigFix Service Management: Cleartext Transmission of Sensitive Information

    also in 2 other products

    		7.4
    HighCVE-2026-56589

    HCL BigFix Service Management: Cross-site Scripting

    also in 2 other products

    		7.2
    HighCVE-2026-67103

    HCL BigFix Service Management: Cross-site Scripting

    also in 3 other products

    		7.6
    CriticalCVE-2026-56592

    HCL BigFix Service Management: Improper Restriction of Excessive Authentication Attempts

    also in 3 other products

    		6.5
    CriticalCVE-2026-56590

    HCL BigFix Service Management: Unrestricted Upload of File with Dangerous Type

    also in 3 other products

    		6.4
    MediumCVE-2026-67171

    HCL BigFix Service Management: Generation of Error Message Containing Sensitive Information

    also in 2 other products

    		5.3
    MediumCVE-2026-67106

    HCL BigFix Service Management: Generation of Error Message Containing Sensitive Information

    also in 2 other products

    		5.3
    MediumCVE-2026-67104

    HCL BigFix Service Management: Use of Hard-coded Credentials

    also in 2 other products

    		5.3
    MediumCVE-2026-21848

    HCL BigFix Service Management: Improper Access Control

    also in 3 other products

    		5.0
    MediumCVE-2025-31980

    HCL BigFix Service Management: Improper Input Validation

    also in 2 other products

    		4.3
    LowCVE-2026-67172

    HCL BigFix Service Management: Generation of Error Message Containing Sensitive Information

    also in 2 other products

    		3.7
    LowCVE-2026-56596

    HCL BigFix Service Management: Improper Input Validation

    also in 1 other product

    		3.5
    CriticalCVE-2026-21806

    HCL BigFix Service Management: Concurrency Issues

    also in 2 other products

    		3.1
    MediumCVE-2026-56597

    HCL BigFix Service Management: Exposure of Sensitive Information to an Unauthorized Actor

    also in 3 other products

    		3.1
    MediumCVE-2026-56595

    HCL BigFix Service Management: Permissive Cross-domain Security Policy with Untrusted Domains

    also in 3 other products

    		3.1
    LowCVE-2026-56599

    HCL BigFix Service Management: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

    also in 2 other products

    		2.2

    All products by Hcl Software