HCL Software HCL Bigfix Webui vulnerabilities

3 vulnerabilities

Known vulnerabilities in HCL Software HCL Bigfix Webui, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.4CVE-2021-27764hcl softwarehcl bigfix webui+1
EPSS score
0.55%
Cookie without HTTPONLY flag set. NUMBER cookie(s) was set without Secure or HTTPOnly flags. The images show the cookie with the missing flag. (WebUI)7.5CVE-2023-28021hcl softwarehcl bigfix webui+1
EPSS score
0.30%
The BigFix WebUI uses weak cipher suites.6.1CVE-2023-28020hcl softwarehcl bigfix webui+1
EPSS score
0.36%
URL redirection in Login page in HCL BigFix WebUI allows malicious user to redirect the client browser to an external site via redirect URL response header.