5.3
Medium
CVE-2026-67104 HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an…
Description
HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly accessible JavaScript files, enabling the discovery of hidden administrative API endpoints for further targeted exploitation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL BigFix Service Management | Versions not published |
Other CVEs of HCL BigFix Service Management
The 18 CVEs of HCL BigFix Service Management →
CVE-2026-56596
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker…
3.5
Low
CVE-2025-31980
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker…
4.3
Medium
CVE-2026-67172
HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive…
3.7
Low
CVE-2026-67171
HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint…
5.3
Medium