8.6
High
CVE-2026-67073 HCL BigFix AEX is affected by multiple security vulnerabilities.
Description
HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or unauthorized files and directly access or download sensitive uploaded content, potentially leading to information disclosure, unauthorized access, or system compromise.
CVSS 3.1 detail
Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:LExploitable remotely over the network, without an account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.
- Attack vector
- Network
- Attack complexity
- Low
- Privileges required
- None
- Interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- Low
- Availability
- Low
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix AEX | 13.0.0.1 | No fix stated |
Other CVEs of BigFix AEX
The 6 CVEs of BigFix AEX →
CVE-2026-21830
HCL BigFix AEX is affected by multiple security vulnerabilities.
3.7
Low
CVE-2026-67077
HCL BigFix AEX is affected by multiple security vulnerabilities.
4.2
Medium
CVE-2026-67079
HCL BigFix AEX is affected by multiple security vulnerabilities.
6.4
Medium
CVE-2026-67080
HCL BigFix AEX is affected by multiple security vulnerabilities.
6.5
Medium