Approved changes feed: RSS · Atom

cpe:2.3:a:hcltech:bigfix_platform:11.0.1:*:*:*:*:*:*:*

part: a version: 11.0.1 update: *

VendorHcltech (be2dce80-cb79-5854-9fe6-9b4a1139ec3e)
ProductBigfix Platform (91d2ac87-586b-5dff-80f0-c4698aee2b1a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-23583 vulnerable 2026-06-08 06:29:39.963526 HCL BigFix Platform is susceptible to insufficiently protected credentials
MEDIUM (6.7)
An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client Deploy Tool on Windows systems.
Published: 2024-05-17T23:06:36.167Z
Updated: 2024-08-01T23:06:25.252Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23556 vulnerable 2026-06-08 06:29:39.930062 HCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiation
MEDIUM (5.9)
SSL/TLS Renegotiation functionality potentially leading to DoS attack vulnerability.
Published: 2024-05-17T23:40:50.064Z
Updated: 2024-10-27T13:31:28.117Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23554 vulnerable 2026-06-08 06:29:39.929346 HCL BigFix Platform is susceptible to Cross-Site Request Forgery
MEDIUM (5.7)
Cross-Site Request Forgery (CSRF) on Session Token vulnerability that could potentially lead to Remote Code Execution (RCE).
Published: 2024-05-17T23:31:39.585Z
Updated: 2024-08-01T23:06:25.219Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.