| CVE-2026-108013 |
BigFix Platform uses Mozilla CA certificate bundle (PEM)
|
6.8
Medium
|
Oct 24, 2026 |
| CVE-2024-30117 |
A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file…
|
2.5
Low
|
Oct 14, 2024 |
| CVE-2024-23556 |
SSL/TLS Renegotiation functionality potentially leading to DoS attack vulnerability
|
5.9
Medium
|
May 17, 2024 |
| CVE-2024-23554 |
Cross-Site Request Forgery (CSRF) on Session Token vulnerability that could potentially lead to Remote Code Execution…
|
5.7
Medium
|
May 17, 2024 |
| CVE-2024-23583 |
An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client…
|
6.7
Medium
|
May 17, 2024 |
| CVE-2023-45715 |
The console may experience a service interruption when processing file names with invalid characters
|
3.5
Low
|
Mar 28, 2024 |
| CVE-2023-45706 |
An administrative user of WebReports may perform a Cross Site Scripting (XSS) and/or Man in the Middle (MITM) exploit…
|
2.0
Low
|
Mar 28, 2024 |
| CVE-2023-45705 |
An administrative user of WebReports may perform a Server Side Request Forgery (SSRF) exploit through SMTP configuration…
|
3.5
Low
|
Mar 28, 2024 |
| CVE-2023-37528 |
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an…
|
6.5
Medium
|
Feb 3, 2024 |
| CVE-2024-23553 |
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform exists due to missing a…
|
3.0
Low
|
Feb 2, 2024 |
| CVE-2023-37531 |
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an…
|
3.3
Low
|
Feb 2, 2024 |
| CVE-2023-37530 |
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an…
|
3.0
Low
|
Feb 2, 2024 |
| CVE-2023-37529 |
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an…
|
3.0
Low
|
Feb 2, 2024 |
| CVE-2023-37527 |
A reflected cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly…
|
5.4
Medium
|
Feb 2, 2024 |
| CVE-2023-37536 |
An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP…
|
8.2
High
|
Oct 11, 2023 |
| CVE-2022-42453 |
There are insufficient warnings when a Fixlet is imported by a user
|
6.9
Medium
|
Dec 17, 2022 |
| CVE-2022-38659 |
In specific scenarios, on Windows the operator credentials may be encrypted in a manner that is not completely…
|
6.0
Medium
|
Dec 17, 2022 |
| CVE-2021-27767 |
The BigFix Console installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that…
|
6.7
Medium
|
May 6, 2022 |
| CVE-2021-27766 |
The BigFix Client installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that…
|
6.7
Medium
|
May 6, 2022 |
| CVE-2021-27765 |
The BigFix Server API installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability…
|
6.7
Medium
|
May 6, 2022 |
| CVE-2021-27762 |
Misconfigured security-related HTTP headers: Several security-related headers were missing or mis-configured on the…
|
4.7
Medium
|
May 6, 2022 |
| CVE-2021-27761 |
Weak web transport security (Weak TLS): An attacker may be able to decrypt the data using attacks
|
4.8
Medium
|
May 6, 2022 |