Bigfix Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:hcltech:bigfix_platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hcltech (be2dce80-cb79-5854-9fe6-9b4a1139ec3e) |
|---|---|
| Product | Bigfix Platform (91d2ac87-586b-5dff-80f0-c4698aee2b1a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-21767 |
vulnerable | 2026-06-08 07:49:16.804073 |
HCL BigFix Platform is affected by insufficient authentication
MEDIUM (4)
HCL BigFix Platform is affected by insufficient authentication. The application might allow users to access sensitive areas of the application without proper authentication.
Published: 2026-04-01T23:47:39.363Z
Updated: 2026-04-02T18:22:19.150Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21765 |
vulnerable | 2026-06-08 07:49:16.803565 |
HCL BigFix Platform is affected by insecure permissions on private cryptographic keys
HIGH (8.8)
HCL BigFix Platform is affected by insecure permissions on private cryptographic keys. The private cryptographic keys located on a Windows host machine might be subject to overly permissive file system permissions.
Published: 2026-04-01T23:36:45.573Z
Updated: 2026-04-02T18:21:14.546Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42200 |
vulnerable | 2026-06-08 06:43:56.292682 |
HCL BigFix Web Reports is potentially susceptible to a Stored Cross-Site Scripting (XSS) attack
HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially weak validation of user input.
Published: 2025-04-15T18:00:17.561Z
Updated: 2025-04-15T18:32:36.345Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42193 |
vulnerable | 2026-06-08 06:43:56.284572 |
HCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attack
HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle (MITM) attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized access.
Published: 2025-04-15T18:16:01.247Z
Updated: 2025-04-15T18:51:09.135Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42189 |
vulnerable | 2026-06-08 06:43:56.279311 |
HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack
HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack, due to a potentially weak validation of an API parameter.
Published: 2025-04-15T18:07:40.703Z
Updated: 2025-04-15T18:21:41.257Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30117 |
vulnerable | 2026-06-08 06:35:29.055964 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23583 |
vulnerable | 2026-06-08 06:29:39.963572 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23556 |
vulnerable | 2026-06-08 06:29:39.930107 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23554 |
vulnerable | 2026-06-08 06:29:39.929422 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23553 |
vulnerable | 2026-06-08 06:29:39.925213 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45715 |
vulnerable | 2026-06-08 06:12:43.151918 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45706 |
vulnerable | 2026-06-08 06:12:43.149434 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45705 |
vulnerable | 2026-06-08 06:12:43.148951 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37536 |
vulnerable | 2026-06-08 06:08:15.580183 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37531 |
vulnerable | 2026-06-08 06:08:15.566064 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37530 |
vulnerable | 2026-06-08 06:08:15.565671 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37529 |
vulnerable | 2026-06-08 06:08:15.565182 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37528 |
vulnerable | 2026-06-08 06:08:15.564513 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37527 |
vulnerable | 2026-06-08 06:08:15.563874 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37520 |
vulnerable | 2026-06-08 06:08:15.553205 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37519 |
vulnerable | 2026-06-08 06:08:15.551884 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42453 |
vulnerable | 2026-06-08 05:49:29.985952 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38659 |
vulnerable | 2026-06-08 05:47:16.777890 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27545 |
vulnerable | 2026-06-08 05:41:56.660439 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27544 |
vulnerable | 2026-06-08 05:41:56.660004 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27767 |
vulnerable | 2026-06-08 05:31:22.131736 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27766 |
vulnerable | 2026-06-08 05:31:22.131162 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27765 |
vulnerable | 2026-06-08 05:31:22.130605 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27762 |
vulnerable | 2026-06-08 05:31:22.125959 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27761 |
vulnerable | 2026-06-08 05:31:22.125424 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4095 |
vulnerable | 2026-06-08 05:25:58.877594 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14254 |
vulnerable | 2026-06-08 05:19:22.803910 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14248 |
vulnerable | 2026-06-08 05:19:22.803370 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.