Product by HCL

    Bigfix Compliance

    8 known vulnerabilities in Bigfix Compliance (HCL), 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Bigfix Compliance (HCL)
    HighCVE-2025-23184

    Apache CXF: Denial of Service vulnerability with temporary files

    also in 18 other products

    		5.9
    HighCVE-2026-46625

    JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection

    also in 6 other products

    		7.5
    CriticalCVE-2026-42257

    net-imap: Command Injection via "raw" arguments to multiple commands

    also in 3 other products

    		9.8
    HighCVE-2026-42258

    net-imap: Command Injection via unvalidated Symbol inputs

    also in 4 other products

    		5.3
    HighCVE-2026-42245

    net-imap: Quadratic complexity when reading response literals

    also in 4 other products

    		7.5
    HighCVE-2026-41493

    yard: Possible arbitrary path traversal and file access via yard server

    also in 2 other products

    		7.5
    HighCVE-2026-42246

    net-imap vulnerable to STARTTLS stripping via invalid response timing

    also in 4 other products

    		7.4
    MediumCVE-2026-42256

    net-imap: Denial of service via high iteration count for `SCRAM-*` authentication

    also in 3 other products

    		6.5

    All products by HCL