HCL Software HCL Bigfix Platform vulnerabilities

5 vulnerabilities

Known vulnerabilities in HCL Software HCL Bigfix Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4CVE-2024-42200hcl softwarehcl bigfix platform+1
EPSS score
0.23%
HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially weak validation of user input.6.5CVE-2024-42189hcl softwarehcl bigfix platform+1
EPSS score
0.30%
HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack, due to a potentially weak validation of an API parameter.8.1CVE-2024-42193hcl softwarehcl bigfix platform+1
EPSS score
0.27%
HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle (MITM) attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized access.7.7CVE-2023-37520hcl softwarehcl bigfix platform+1
EPSS score
0.25%
Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data exfiltration. This XSS vulnerability is in the Gather Status Report, which is served by the BigFix Relay.7.7CVE-2023-37519hcl softwarehcl bigfix platform+1
EPSS score
0.25%
Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. This XSS vulnerability is in the Download Status Report, which is served by the BigFix Server.