Approved changes feed: RSS · Atom

cpe:2.3:a:hcl_software:bigfix_insights_for_vulnerability_remediation:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847)
ProductBigfix Insights For Vulnerability Remediation (bf6fffea-478d-5538-a4c1-114415597965)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-44758 vulnerable 2026-06-08 05:49:36.393098 HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper credential handling
MEDIUM (6.5)
BigFix Insights/IVR fixlet uses improper credential handling within certain fixlet content. An attacker can gain access to information that is not explicitly authorized.
Published: 2023-10-11T06:00:38.185Z
Updated: 2024-09-18T20:51:19.166Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44757 vulnerable 2026-06-08 05:49:36.381806 HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to weak cryptography
MEDIUM (6.5)
BigFix Insights for Vulnerability Remediation (IVR) uses weak cryptography that can lead to credential exposure. An attacker could gain access to sensitive information, modify data in unexpected ways, etc.
Published: 2023-10-11T06:13:27.405Z
Updated: 2024-09-18T18:09:57.783Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44756 vulnerable 2026-06-08 05:49:36.381350 HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper input validation
MEDIUM (6.4)
Insights for Vulnerability Remediation (IVR) is vulnerable to improper input validation. This may lead to information disclosure. This requires privileged access. 
Published: 2022-12-19T21:17:57.664Z
Updated: 2025-04-16T18:13:11.398Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42454 vulnerable 2026-06-08 05:49:29.987584 HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper certificate validation
MEDIUM (6.4)
Insights for Vulnerability Remediation (IVR) is vulnerable to man-in-the-middle attacks that may lead to information disclosure.  This requires privileged network access.
Published: 2022-12-19T21:10:13.991Z
Updated: 2025-04-16T18:24:00.436Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.