Bigfix Inventory
Approved changes feed: RSS · Atom
cpe:2.3:a:hcltech:bigfix_inventory:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hcltech (be2dce80-cb79-5854-9fe6-9b4a1139ec3e) |
|---|---|
| Product | Bigfix Inventory (1199d259-8c84-560a-87ac-0691506d1f44) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-23540 |
vulnerable | 2026-06-08 06:29:39.895496 |
HCL BigFix Inventory is vulnerable to path traversal
MEDIUM (5.3)
The HCL BigFix Inventory server is vulnerable to path traversal which enables an attacker to read internal application files from the Inventory server. The BigFix Inventory server does not properly restrict the served static file.
Published: 2024-04-03T16:32:51.950Z
Updated: 2024-08-01T23:06:25.219Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27759 |
vulnerable | 2026-06-08 05:31:22.117800 |
Details available
LOW (2.3)
This vulnerability arises because the application allows the user to perform some sensitive action without verifying that the request was sent intentionally. An attacker can cause a victim's browser to emit an HTTP request to an arbitrary URL in the application.
Published: 2022-05-06T18:10:29.374Z
Updated: 2024-09-17T04:19:25.489Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27758 |
vulnerable | 2026-06-08 05:31:22.117227 |
Details available
MEDIUM (4.3)
There is a security vulnerability in login form related to Cross-site Request Forgery which prevents user to login after attacker spam to login and system blocked victim's account.
Published: 2022-05-06T18:10:27.962Z
Updated: 2024-09-16T20:12:17.004Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.