TI-2023-12598 CVE-2023-28012 · GHSA-fwmc-89r4-x328
HCL BigFix Mobile can be affected by a command injection vulnerability
Priority MEDIUM 40
HCL BigFix Mobile is vulnerable to a command injection attack.
HCL Software
Records662All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical66CVSS 9.0–10.0
CVSS high157CVSS 7.0–8.9
Exploited now
HCL Software records in CISA KEVNo HCL Software vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
10 records in Bigfix Mobile · all components
TI-2025-00221 CVE-2025-0277 · GHSA-w347-qgp9-p6gq
HCL BigFix Mobile is affected by an insecure Content Security Policy (CSP)
Priority LOW 35
HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP).
TI-2025-00220 CVE-2025-0276 · GHSA-mchx-c3f3-4j52
HCL BigFix Modern Client Management (MCM) is affected by an insecure Content Security Policy (CSP)
Priority LOW 35
HCL BigFix Modern Client Management (MCM) 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP).
TI-2021-09176 CVE-2021-27782 · GHSA-93v4-p5mh-4hr7
HCL BigFix Mobile / Modern Client Management Server passwords are susceptible to a brute-force attack
Priority LOW 33
HCL BigFix Mobile / Modern Client Management Admin and Config UI passwords can be brute-forced.
TI-2025-00219 CVE-2025-0275 · GHSA-2968-wv79-2wqf
Missing authentication in HCL Software BigFix Mobile
Priority LOW 30
HCL BigFix Mobile 3.3 and earlier is affected by improper access control.
TI-2025-00218 CVE-2025-0274 · GHSA-99wf-56wq-qm88
Missing authentication in HCL Software BigFix Modern Client Management
Priority LOW 30
HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control.
TI-2021-09177 CVE-2021-27783 · GHSA-g59m-qj5c-h6r8
HCL BigFix Mobile / Modern Client Management is vulnerable to sensitive information exposure
Priority LOW 30
User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed.
TI-2021-09175 CVE-2021-27781 · GHSA-2r44-78ff-wqc3
HCL BigFix Mobile / Modern Client Management is vulnerable to stored cross-site scripting
Priority LOW 30
The Master operator may be able to embed script tag in HTML with alert pop-up display cookie.
TI-2023-12600 CVE-2023-28014 · GHSA-6xq7-pq77-mfp5
HCL BigFix Mobile can be affected by a cross-site scripting (XSS) vulnerability
Priority LOW 29
HCL BigFix Mobile is vulnerable to a cross-site scripting attack.
TI-2021-09174 CVE-2021-27780 · GHSA-q2x2-7xpw-6rm3
HCL BigFix Mobile / Modern Client Management is vulnerable to unauthenticated XML interaction
Priority LOW 25
The software may be vulnerable to both Un-Auth XML interaction and unauthenticated device enrollment.