BigFix

HCL BigFix is affected by multiple security flaws, including RCE, SQL injection, XSS, SSRF, and privilege escalation, which could allow an unauthenticated attacker to compromise the integrity and confidentiality of the platform.

A remote, anonymous attacker can exploit a vulnerability in HCL BigFix to manipulate data and conduct a cross-site scripting attack.

Multiple vulnerabilities in HCL BigFix could allow an attacker to disclose information, execute arbitrary code, perform a denial of service attack, and manipulate files.