Description
HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and trick users into performing unintended actions, potentially leading to unauthorized transactions or changes to their accounts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | BigFix AEX | v13.0.0.1 | — |
Advisories 1
- WID-SEC-2026-4236 HCL BigFix AEX: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 28, 2026