Description
HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive information in error messages when invalid inputs are sent to certain API endpoints . This information could enable an attacker to facilitate further attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | HCL BigFix Service Management | Version 27 | — |
Advisories 1
- WID-SEC-2026-3707 HCL BigFix: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 6, 2026