Skip to content
OpenAdvisories

Product · HCLSoftware

BigFix WebUI

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-15634

    HCL BigFix WebUI is affected by a missing authorization vulnerability

    A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to view sensitive environmental information via direct URL access to the unauthorized page.

    HCLSoftware BigFix WebUI
  • Medium 5.3
    CVE-2025-15633

    HCL BigFix WebUI is affected by an improper authorization vulnerability

    An improper authorization vulnerability in HCL BigFix WebUI allows an authenticated user without Master Operator privileges to access internal data (site names, versions, and configuration variables) and bypass privilege requirements via unprotected endpoints…

    HCLSoftware BigFix WebUI