Description
HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | HCL BigFix Service Management | Version 27 | — |
Advisories 1
- WID-SEC-2026-3707 HCL BigFix: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 6, 2026