Skip to content
OpenAdvisories

Product · HCL Software

HCL BigFix Platform

6 known vulnerabilities.

2 results · Clear filters · Feed

  • Low 3.1

    HCL BigFix Platform is affected by a user enumeration vulnerability

    HCL BigFix Platform is affected by a user enumeration vulnerability which might allow an attacker, through careful system control and response time monitoring, to perform some level of user enumeration for the BigFix service.

  • Low 2.1

    HCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attack

    HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle (MITM) attacks and data exposure as, if exploited, this vulnerability coul…