Read the docs

HCL Software

Records662All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical66CVSS 9.0–10.0
CVSS high157CVSS 7.0–8.9

Exploited now

HCL Software records in CISA KEV

No HCL Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Bigfix Service Management 36 records MEDIUM Bigfix Platform 33 records MEDIUM Dryice Myxalytics 31 records MEDIUM Aion 29 records MEDIUM Connections 24 records LOW Domino 22 records MEDIUM Unica 18 records MEDIUM Aftermarket Cloud 17 records MEDIUM

Records

9 records in Bigfix Compliance · all components

TI-2023-19124 CVE-2023-37525 · GHSA-9g2x-9v62-m8g9

HCL BigFix Compliance is vulnerable to a sensitive information disclosure

Priority LOW 30

A sensitive information disclosure in HCL BigFix Compliance allows a remote attacker to access files under the WEB-INF directory, which may contain Java class files and configuration information, leading to unauthorized…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00348 Published 2026-01-28 No fix listed CWE-497
TI-2024-19883 CVE-2024-30125 · GHSA-7p6r-chvr-633v

HCL BigFix Compliance is affected by an internal server error

Priority LOW 27

HCL BigFix Compliance server can respond with an HTTP status of 500, indicating a server-side error that may cause the server process to die.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00134 Published 2024-07-18 No fix listed CWE-918
TI-2024-19893 CVE-2024-30140 · GHSA-7699-wpx7-684c

Open redirect in HCL Software BigFix Compliance

Priority LOW 24

HCL BigFix Compliance is affected by unvalidated redirects and forwards.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00251 Published 2024-11-07 No fix listed CWE-601
TI-2024-19884 CVE-2024-30126 · GHSA-hmj9-jcgj-cqxx

HCL BigFix Compliance is affected by a missing X-Frame-Options Header vulnerability

Priority LOW 21

HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a malicious website that embeds the target website in a frame or iframe, tricking users into performing act…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.0022 Published 2024-07-18 No fix listed CWE-79
Open these records in search →