Skip to content
Threat Feed
Subscribe

Vendor

HCL

4 briefs RSS
high threat

HCL BigFix Vulnerability Allows Data Manipulation and Cross-Site Scripting

A remote, anonymous attacker can exploit a vulnerability in HCL BigFix to manipulate data and conduct a cross-site scripting attack.

BigFix vulnerability xss data manipulation
2r 1t
medium advisory

HCL BigFix WebUI Information Disclosure Vulnerabilities

A remote, authenticated attacker can exploit multiple vulnerabilities in HCL BigFix WebUI applications to disclose sensitive information.

BigFix WebUI information-disclosure webui hcl
2r 1t
high advisory

Multiple Vulnerabilities in HCL BigFix

Multiple vulnerabilities in HCL BigFix could allow an attacker to disclose information, execute arbitrary code, perform a denial of service attack, and manipulate files.

BigFix vulnerability code-execution dos information-disclosure
2r 3t
high advisory

HCL Aftermarket DPC Hardcoded Credentials Vulnerability (CVE-2025-55263)

HCL Aftermarket DPC is vulnerable to hardcoded sensitive data (CVE-2025-55263), potentially enabling attackers to access source code or retrieve hardcoded secrets from insecure repositories.

HCL Aftermarket DPC cve-2025-55263 hardcoded-credentials hcl
2r 2t