Skip to content
OpenAdvisories

Product · HCL Software

BigFix Quantum Risk Analyzer

4 known vulnerabilities.

2 results · Clear filters · Feed

  • Low 3.9

    HCL BigFix Quantum Risk Analyzer is affected by a stack-based buffer overflow

    HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buffer overflow.

  • Low 3.9

    HCL BigFix Quantum Risk Analyzer is affected by generating error messages with sensitive information

    HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to …