Product by HCL

    Bigfix Service Management

    14 known vulnerabilities in Bigfix Service Management (HCL), 0 of them actively exploited (CISA KEV).

    Key figures

    14

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Bigfix Service Management (HCL)
    CriticalCVE-2026-18963

    Red Hat: Weak Password Recovery Mechanism for Forgotten Password

    also in 7 other products

    		9.1
    CriticalCVE-2026-67100

    HCL BigFix Service Management: SQL Injection

    also in 3 other products

    		9.8
    CriticalCVE-2026-67101

    HCL BigFix Service Management: Server-Side Request Forgery (SSRF)

    also in 3 other products

    		9.3
    HighCVE-2026-67102

    HCL BigFix Service Management: Improper Authorization

    also in 3 other products

    		8.1
    HighCVE-2026-67103

    HCL BigFix Service Management: Cross-site Scripting

    also in 3 other products

    		7.6
    HighCVE-2026-73086

    nanoid: Integer Overflow or Wraparound

    also in 1 other product

    		7.4
    CriticalCVE-2026-56592

    HCL BigFix Service Management: Improper Restriction of Excessive Authentication Attempts

    also in 3 other products

    		6.5
    CriticalCVE-2026-56590

    HCL BigFix Service Management: Unrestricted Upload of File with Dangerous Type

    also in 3 other products

    		6.4
    HighCVE-2026-23950

    node-tar has Race Condition in Path Reservations via Unicode Ligature Collisions on macOS APFS

    also in 3 other products

    		8.8
    MediumCVE-2026-21848

    HCL BigFix Service Management: Improper Access Control

    also in 3 other products

    		5.0
    HighCVE-2026-26960

    Isaacs Node-tar: Path Traversal

    also in 5 other products

    		7.1
    CriticalCVE-2026-21806

    HCL BigFix Service Management: Concurrency Issues

    also in 2 other products

    		3.1
    MediumCVE-2026-56597

    HCL BigFix Service Management: Exposure of Sensitive Information to an Unauthorized Actor

    also in 3 other products

    		3.1
    MediumCVE-2026-56595

    HCL BigFix Service Management: Permissive Cross-domain Security Policy with Untrusted Domains

    also in 3 other products

    		3.1

    News

    All products by HCL