Bigfix Compliance
Approved changes feed: RSS · Atom
cpe:2.3:a:hcltech:bigfix_compliance:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hcltech (be2dce80-cb79-5854-9fe6-9b4a1139ec3e) |
|---|---|
| Product | Bigfix Compliance (c6933324-15ca-5ad9-9353-1401ddd9cb9c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-30126 |
vulnerable | 2026-06-08 06:35:29.066819 |
HCL BigFix Compliance is affected by a missing X-Frame-Options Header vulnerability
MEDIUM (4.7)
HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a malicious website that embeds the target website in a frame or iframe, tricking users into performing actions on the target website without their knowledge.
Published: 2024-07-18T19:17:01.983Z
Updated: 2024-10-30T16:24:33.273Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30125 |
vulnerable | 2026-06-08 06:35:29.066133 |
HCL BigFix Compliance is affected by an internal server error
MEDIUM (6.2)
HCL BigFix Compliance server can respond with an HTTP status of 500, indicating a server-side error that may cause the server process to die.
Published: 2024-07-18T17:59:48.338Z
Updated: 2024-11-12T20:40:57.871Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23551 |
vulnerable | 2026-06-08 06:29:39.922493 |
HCL BigFix Compliance is potentially affected by Oracle database credentials stored at endpoint
MEDIUM (6.5)
Database scanning using username and password stores the credentials in plaintext or encoded format within files at the endpoint. This has been identified as a significant security risk. This will lead to exposure of sensitive information for unauthorized access, potentially leading to severe consequences such as data breaches, unauthorized data manipulation, and compromised system integrity.
Published: 2024-05-07T21:46:54.285Z
Updated: 2024-08-01T23:06:25.195Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27756 |
vulnerable | 2026-06-08 05:31:22.113826 |
Details available
"TLS-RSA cipher suites are not disabled in BigFix Compliance up to v2.0.5. If TLS 2.0 and secure ciphers are not enabled then an attacker can passively record traffic and later decrypt it."
Published: 2022-03-04T21:18:06.000Z
Updated: 2024-08-03T21:26:10.871Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.