Skip to content

Known vulnerabilities in HCL Software BigFix Compliance

Is your version affected?

CVE Summary Score Published
CVE-2024-30142 HCL BigFix Compliance is affected by a missing secure flag on a cookie 3.8 Low Nov 7, 2024
CVE-2024-30141 HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information 4.7 Medium Nov 7, 2024
CVE-2024-30140 HCL BigFix Compliance is affected by unvalidated redirects and forwards 5.4 Medium Nov 7, 2024
CVE-2024-30126 HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a… 4.7 Medium Jul 18, 2024
CVE-2024-30125 HCL BigFix Compliance server can respond with an HTTP status of 500, indicating a server-side error that may cause the… 6.2 Medium Jul 18, 2024
CVE-2024-23551 Database scanning using username and password stores the credentials in plaintext or encoded format within files at… 6.5 Medium May 7, 2024

Other HCL Software products