Skip to content
Threat Feed

Product

BigFix

5 briefs RSS
medium advisory

HCL BigFix: Security bypass vulnerability

A vulnerability in HCL BigFix allows a remote, unauthenticated attacker to bypass security measures and manipulate files on the affected system.

BigFix vulnerability security-bypass patch-management
medium advisory

Multiple Vulnerabilities in HCL BigFix

HCL BigFix is affected by multiple security vulnerabilities (CVE-2024-22248, CVE-2024-22249, CVE-2024-22250, CVE-2024-22251, CVE-2024-22252) that could allow a remote attacker to conduct cross-site scripting (XSS), disclose sensitive information, or manipulate data.

BigFix vulnerability web-application hcl-bigfix
4c
high advisory

Multiple Vulnerabilities in HCL BigFix

HCL BigFix is affected by multiple security flaws, including RCE, SQL injection, XSS, SSRF, and privilege escalation, which could allow an unauthenticated attacker to compromise the integrity and confidentiality of the platform.

BigFix
4t
high threat

HCL BigFix Vulnerability Allows Data Manipulation and Cross-Site Scripting

A remote, anonymous attacker can exploit a vulnerability in HCL BigFix to manipulate data and conduct a cross-site scripting attack.

BigFix vulnerability xss data manipulation
2r 1t
high advisory

Multiple Vulnerabilities in HCL BigFix

Multiple vulnerabilities in HCL BigFix could allow an attacker to disclose information, execute arbitrary code, perform a denial of service attack, and manipulate files.

BigFix vulnerability code-execution dos information-disclosure
2r 3t