9.8
Critique
CVE-2026-67100 HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities
Description
HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities. which could allow an authenticated attacker to inject database commands to extract sensitive system details, as well as manipulate request values to gain unauthorized access to full personal profile data and PII across different organizations.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HCL BigFix Service Management | 23 | Pas de correctif indiqué |
Autres CVE de HCL BigFix Service Management
Les 18 CVE de HCL BigFix Service Management →
CVE-2026-56596
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker…
3.5
Faible
CVE-2025-31980
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker…
4.3
Moyenne
CVE-2026-67172
HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive…
3.7
Faible
CVE-2026-67171
HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint…
5.3
Moyenne