4.2
Medium
CVE-2026-67077 HCL BigFix AEX is affected by multiple security vulnerabilities.
Description
HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the application to send unauthorized requests to external resources. Successful exploitation could lead to access to unintended services, sensitive information disclosure, or unauthorized actions through the affected application.
CVSS 3.1 detail
Vector CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:NExploitable remotely over the network, with an ordinary account and without any user action; the impact on data or service is limited.
- Attack vector
- Network
- Attack complexity
- High
- Privileges required
- Low
- Interaction
- None
- Scope
- Unchanged
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix AEX | 13.0.0.1 | No fix stated |
Other CVEs of BigFix AEX
The 6 CVEs of BigFix AEX →
CVE-2026-21830
HCL BigFix AEX is affected by multiple security vulnerabilities.
3.7
Low
CVE-2026-67079
HCL BigFix AEX is affected by multiple security vulnerabilities.
6.4
Medium
CVE-2026-67080
HCL BigFix AEX is affected by multiple security vulnerabilities.
6.5
Medium
CVE-2026-67073
HCL BigFix AEX is affected by multiple security vulnerabilities.
8.6
High