3.7
Low
CVE-2026-21830 HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package
Description
HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent to unintended or non‐AWS endpoints.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix AEX | 13.0 | No fix stated |
Other CVEs of BigFix AEX
The 6 CVEs of BigFix AEX →
CVE-2026-67077
HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the…
4.2
Medium
CVE-2026-67079
HCL BigFix AEX is affected by multiple security vulnerabilities.
6.4
Medium
CVE-2026-67080
HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or…
6.5
Medium
CVE-2026-67073
HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability
8.6
High