5.0
Medium
CVE-2026-21848 HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an…
Description
HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL BigFix Service Management | 23 | No fix stated |
Other CVEs of HCL BigFix Service Management
The 18 CVEs of HCL BigFix Service Management →
CVE-2026-56596
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker…
3.5
Low
CVE-2025-31980
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker…
4.3
Medium
CVE-2026-67172
HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive…
3.7
Low
CVE-2026-67171
HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint…
5.3
Medium