Skip to content
OpenAdvisories

Product · HCL Software

BigFix Platform

24 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low 2.5
    CVE-2024-30117

    HCL BigFix Platform is affected by a DLL Hijack vulnerability

    A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file under some circumstances.

    HCL Software BigFix Platform
  • Low 3.5
    CVE-2023-45715

    HCL BigFix Platform is susceptible to a Denial of Service attack

    The console may experience a service interruption when processing file names with invalid characters.

    HCL Software BigFix Platform
  • Low 2.0
    CVE-2023-45706

    HCL BigFix Platform is susceptible to Cross Site Scripting (XSS) and/or Man in the Middle (MITM) attack

    An administrative user of WebReports may perform a Cross Site Scripting (XSS) and/or Man in the Middle (MITM) exploit through SAML configuration.

    HCL Software BigFix Platform
  • Low 3.5
    CVE-2023-45705

    HCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF)

    An administrative user of WebReports may perform a Server Side Request Forgery (SSRF) exploit through SMTP configuration options.

    HCL Software BigFix Platform
  • Low 3.0
    CVE-2024-23553

    A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

    A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform exists due to missing a specific http header attribute.

    HCL Software BigFix Platform
  • Low 3.3
    CVE-2023-37531

    A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

    A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a form field of a webpage by a user with privileged access.

    HCL Software BigFix Platform
  • Low 3.0
    CVE-2023-37530

    A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

    A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage trying to retrieve cookie stored information.

    HCL Software BigFix Platform
  • Low 3.0
    CVE-2023-37529

    A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

    A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage trying to retrieve cookie stored information. This is not the same vulnerability …

    HCL Software BigFix Platform