Approved changes feed: RSS · Atom

cpe:2.3:a:hcl_software:hcl_bigfix_mobile_/_modern_client_management:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847)
ProductHcl Bigfix Mobile / Modern Client Management (538fa8c0-e691-5168-abe3-9329fbf59770)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-28025 vulnerable 2026-06-08 05:57:42.862700 An HTML injection vulnerability can affect HCL BigFix Mobile / Modern Client Management
MEDIUM (6.6)
Due to this vulnerability, the Master operator could potentially incorporate an SVG tag into HTML, leading to an alert pop-up displaying a cookie. To mitigate stored XSS vulnerabilities, a preventive measure involves thoroughly sanitizing and validating all user inputs before they are processed and stored in the server storage.
Published: 2023-12-21T00:32:29.551Z
Updated: 2024-08-02T12:23:30.865Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27783 vulnerable 2026-06-08 05:31:22.156915 HCL BigFix Mobile / Modern Client Management is vulnerable to sensitive information exposure
MEDIUM (6.8)
User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed.
Published: 2022-05-25T15:20:18.484Z
Updated: 2024-09-16T23:41:53.179Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27781 vulnerable 2026-06-08 05:31:22.153758 HCL BigFix Mobile / Modern Client Management is vulnerable to stored cross-site scripting
MEDIUM (6.6)
The Master operator may be able to embed script tag in HTML with alert pop-up display cookie.
Published: 2022-05-27T16:15:16.664Z
Updated: 2024-09-16T23:21:37.184Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27780 vulnerable 2026-06-08 05:31:22.151999 HCL BigFix Mobile / Modern Client Management is vulnerable to unauthenticated XML interaction
MEDIUM (5.3)
The software may be vulnerable to both Un-Auth XML interaction and unauthenticated device enrollment.
Published: 2022-05-27T16:15:15.034Z
Updated: 2024-09-16T23:31:26.856Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.