9.3
Critical
CVE-2026-67101 HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability in its search…
Description
HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability in its search functionality, which could allow an attacker to force the application server to send requests to internal systems that are not accessible from the internet.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL BigFix Service Management | 23 | No fix stated |
Other CVEs of HCL BigFix Service Management
The 18 CVEs of HCL BigFix Service Management →
CVE-2026-56596
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker…
3.5
Low
CVE-2025-31980
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker…
4.3
Medium
CVE-2026-67172
HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive…
3.7
Low
CVE-2026-67171
HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint…
5.3
Medium