Hcltech Bigfix Insights For Vulnerability Remediation vulnerabilities

5 vulnerabilities

Known vulnerabilities in Hcltech Bigfix Insights For Vulnerability Remediation, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2025-31962hclsoftwarebigfix ivr+1
EPSS score
0.18%
Insufficient session expiration in the Web UI authentication component in HCL BigFix IVR version 4.2 allows an authenticated attacker to gain prolonged unauthorized access to protected API endpoints due to excessive expiration periods.3.3CVE-2025-31963hclsoftwarebigfix ivr+1
EPSS score
0.09%
Improper authentication and missing CSRF protection in the local setup interface component in HCL BigFix IVR version 4.2 allows a local attacker to perform unauthorized configuration changes via unauthenticated administrative configuration requests.4.9CVE-2025-31964hclsoftwarebigfix ivr+1
EPSS score
0.35%
Improper service binding configuration in internal service components in HCL BigFix IVR version 4.2 allows a privileged attacker to impact service availability via exposure of administrative services bound to external network interfaces instead of the local authentication interface.6.5CVE-2022-44758hcl softwarebigfix insights for vulnerability remediation+1
EPSS score
0.40%
BigFix Insights/IVR fixlet uses improper credential handling within certain fixlet content. An attacker can gain access to information that is not explicitly authorized.8.2CVE-2022-44757hcl softwarebigfix insights for vulnerability remediation+1
EPSS score
0.39%
BigFix Insights for Vulnerability Remediation (IVR) uses weak cryptography that can lead to credential exposure. An attacker could gain access to sensitive information, modify data in unexpected ways, etc.