6.5
Medium
CVE-2026-67080 HCL BigFix AEX is affected by multiple security vulnerabilities.
Description
HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensitive technical information, including stack traces, system details, or internal paths, potentially facilitating further attacks.
CVSS 3.1 detail
Vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitable remotely over the network, with an ordinary account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.
- Attack vector
- Network
- Attack complexity
- Low
- Privileges required
- Low
- Interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix AEX | 13.0.0.1 | No fix stated |
Other CVEs of BigFix AEX
The 6 CVEs of BigFix AEX →
CVE-2026-21830
HCL BigFix AEX is affected by multiple security vulnerabilities.
3.7
Low
CVE-2026-67077
HCL BigFix AEX is affected by multiple security vulnerabilities.
4.2
Medium
CVE-2026-67079
HCL BigFix AEX is affected by multiple security vulnerabilities.
6.4
Medium
CVE-2026-67073
HCL BigFix AEX is affected by multiple security vulnerabilities.
8.6
High