Bigfix Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:hcl_software:bigfix_platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847) |
|---|---|
| Product | Bigfix Platform (4c59b949-34cc-5f4e-b559-917bca077a12) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-30117 |
vulnerable | 2026-06-08 06:35:29.055103 |
HCL BigFix Platform is affected by a DLL Hijack vulnerability
LOW (2.5)
A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file under some circumstances.
Published: 2024-10-14T22:55:56.979Z
Updated: 2024-10-15T13:40:40.322Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23583 |
vulnerable | 2026-06-08 06:29:39.963551 |
HCL BigFix Platform is susceptible to insufficiently protected credentials
MEDIUM (6.7)
An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client Deploy Tool on Windows systems.
Published: 2024-05-17T23:06:36.167Z
Updated: 2024-08-01T23:06:25.252Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23556 |
vulnerable | 2026-06-08 06:29:39.930088 |
HCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiation
MEDIUM (5.9)
SSL/TLS Renegotiation functionality potentially leading to DoS attack vulnerability.
Published: 2024-05-17T23:40:50.064Z
Updated: 2024-10-27T13:31:28.117Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23554 |
vulnerable | 2026-06-08 06:29:39.929394 |
HCL BigFix Platform is susceptible to Cross-Site Request Forgery
MEDIUM (5.7)
Cross-Site Request Forgery (CSRF) on Session Token vulnerability that could potentially lead to Remote Code Execution (RCE).
Published: 2024-05-17T23:31:39.585Z
Updated: 2024-08-01T23:06:25.219Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23553 |
vulnerable | 2026-06-08 06:29:39.924352 |
A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform
LOW (3)
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform exists due to missing a specific http header attribute.
Published: 2024-02-02T21:03:33.226Z
Updated: 2025-06-03T18:36:43.190Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45715 |
vulnerable | 2026-06-08 06:12:43.151736 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45706 |
vulnerable | 2026-06-08 06:12:43.149394 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45705 |
vulnerable | 2026-06-08 06:12:43.148046 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37536 |
vulnerable | 2026-06-08 06:08:15.578778 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37531 |
vulnerable | 2026-06-08 06:08:15.566037 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37530 |
vulnerable | 2026-06-08 06:08:15.565557 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37529 |
vulnerable | 2026-06-08 06:08:15.565074 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37528 |
vulnerable | 2026-06-08 06:08:15.564473 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37527 |
vulnerable | 2026-06-08 06:08:15.563823 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42453 |
vulnerable | 2026-06-08 05:49:29.985088 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38659 |
vulnerable | 2026-06-08 05:47:16.777312 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27767 |
vulnerable | 2026-06-08 05:31:22.131622 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27766 |
vulnerable | 2026-06-08 05:31:22.131120 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27765 |
vulnerable | 2026-06-08 05:31:22.128839 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27762 |
vulnerable | 2026-06-08 05:31:22.125916 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27761 |
vulnerable | 2026-06-08 05:31:22.124877 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.