Bigfix Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:hcl_software:bigfix_platform:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Hcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847) |
|---|---|
| Product | Bigfix Platform (4c59b949-34cc-5f4e-b559-917bca077a12) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-108013 |
vulnerable | 2026-11-03 10:18:02.102810 |
HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID)
MEDIUM (6.8)
BigFix Platform uses Mozilla CA certificate bundle (PEM). Versions of the bundle dated before 2026/10/20 still trust certificates whose private keys have been compromised. When BigFix Platform validates servers using such a bundle, an on-path attacker can impersonate remote servers and tamper with files downloaded by the application. The issue is resolved by using bundle version 2026/10/20 or later. The fixed bundle is available starting from BES Support v1520.
Published: 2026-10-24T06:23:11.930Z
Updated: 2026-11-02T16:06:28.435Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30117 |
vulnerable | 2026-06-08 06:35:29.055103 |
HCL BigFix Platform is affected by a DLL Hijack vulnerability
LOW (2.5)
A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file under some circumstances.
Published: 2024-10-14T22:55:56.979Z
Updated: 2024-10-15T13:40:40.322Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23583 |
vulnerable | 2026-06-08 06:29:39.963551 |
HCL BigFix Platform is susceptible to insufficiently protected credentials
MEDIUM (6.7)
An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client Deploy Tool on Windows systems.
Published: 2024-05-17T23:06:36.167Z
Updated: 2024-08-01T23:06:25.252Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23556 |
vulnerable | 2026-06-08 06:29:39.930088 |
HCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiation
MEDIUM (5.9)
SSL/TLS Renegotiation functionality potentially leading to DoS attack vulnerability.
Published: 2024-05-17T23:40:50.064Z
Updated: 2024-10-27T13:31:28.117Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23554 |
vulnerable | 2026-06-08 06:29:39.929394 |
HCL BigFix Platform is susceptible to Cross-Site Request Forgery
MEDIUM (5.7)
Cross-Site Request Forgery (CSRF) on Session Token vulnerability that could potentially lead to Remote Code Execution (RCE).
Published: 2024-05-17T23:31:39.585Z
Updated: 2024-08-01T23:06:25.219Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23553 |
vulnerable | 2026-06-08 06:29:39.924352 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45715 |
vulnerable | 2026-06-08 06:12:43.151736 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45706 |
vulnerable | 2026-06-08 06:12:43.149394 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45705 |
vulnerable | 2026-06-08 06:12:43.148046 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37536 |
vulnerable | 2026-06-08 06:08:15.578778 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37531 |
vulnerable | 2026-06-08 06:08:15.566037 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37530 |
vulnerable | 2026-06-08 06:08:15.565557 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37529 |
vulnerable | 2026-06-08 06:08:15.565074 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37528 |
vulnerable | 2026-06-08 06:08:15.564473 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37527 |
vulnerable | 2026-06-08 06:08:15.563823 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42453 |
vulnerable | 2026-06-08 05:49:29.985088 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38659 |
vulnerable | 2026-06-08 05:47:16.777312 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27767 |
vulnerable | 2026-06-08 05:31:22.131622 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27766 |
vulnerable | 2026-06-08 05:31:22.131120 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27765 |
vulnerable | 2026-06-08 05:31:22.128839 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27762 |
vulnerable | 2026-06-08 05:31:22.125916 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27761 |
vulnerable | 2026-06-08 05:31:22.124877 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.