Skip to content
OpenAdvisories
Medium WID-SEC-2025-2876 2 CVEs

HCL BigFix Remote Control: Mehrere Schwachstellen

Published Dec 17, 2025 · Updated Dec 17, 2025 · de-DE

Vendor: HCL Software Product: BigFix Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in HCL BigFix Remote Control ausnutzen, um Informationen offenzulegen und Code auszuführen.

Product

BigFix ist eine Lösung zum Erkennen und Verwalten von physischen und virtuellen Endpunkten.

Vulnerabilities 2

  • Medium 4.7
    CVE-2025-59849

    HCL BigFix Remote Control is vulnerable to an insecure CSP configuration

    Improper management of Content Security Policy in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow the execution of malicious code in web pages.

    HCL Software BigFix Remote Control
  • Low 3.7
    CVE-2025-55254

    HCL BigFix Remote Control is vulnerable to a Path-relative stylesheet import (PRSSI)

    Improper management of Path-relative stylesheet import in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow to execute malicious code in certain web pages.

    HCL Software BigFix Remote Control

Revision history

  1. #1

    Initiale Fassung

References