Skip to content

Known vulnerabilities in HCL Software HCL BigFix Platform

Is your version affected?

CVE Summary Score Published
CVE-2024-42193 HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate… 2.1 Low Apr 15, 2025
CVE-2024-42189 HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack, due to a potentially weak validation of… 5.6 Medium Apr 15, 2025
CVE-2024-42200 HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially weak… 4.8 Medium Apr 15, 2025
CVE-2023-37520 Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68,… 7.7 High Dec 21, 2023
CVE-2023-37519 Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability 7.7 High Dec 21, 2023

Other HCL Software products