Skip to content
Sign in
2.3 Low

CVE-2021-27759 This vulnerability arises because the application allows the user to perform some sensitive action without verifying…

Description

This vulnerability arises because the application allows the user to perform some sensitive action without verifying that the request was sent intentionally. An attacker can cause a victim's browser to emit an HTTP request to an arbitrary URL in the application.

Affected products and versions

Product Affected versions Fixed in
HCL BigFix Inventory 10.x No fix stated
HCL BigFix Inventory 9.x No fix stated

Other CVEs of HCL BigFix Inventory

The 2 CVEs of HCL BigFix Inventory →
CVE-2021-27758 There is a security vulnerability in login form related to Cross-site Request Forgery which prevents user to login after… 4.3 Medium
Track this CVE