Bigfix Webui
Approved changes feed: RSS · Atom
cpe:2.3:a:hcltech:bigfix_webui:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hcltech (be2dce80-cb79-5854-9fe6-9b4a1139ec3e) |
|---|---|
| Product | Bigfix Webui (e9cb9673-9d9c-52ea-8c46-ee1d8b134317) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-28023 |
vulnerable | 2026-06-08 05:57:42.860876 |
HCL BigFix WebUI Software Distribution is affected by a cross site server request forgery vulnerability
MEDIUM (4.9)
A cross site request forgery vulnerability in the BigFix WebUI Software Distribution interface site version 44 and before allows an NMO attacker to access files on server side systems (server machine and all the ones in its network).
Published: 2023-07-18T19:07:40.553Z
Updated: 2024-10-21T14:36:00.258Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28019 |
vulnerable | 2026-06-08 05:57:42.855295 |
An SQL injection affects BigFix WebUI API
MEDIUM (5.5)
Insufficient validation in Bigfix WebUI API App site version < 14 allows an authenticated WebUI user to issue SQL queries via an unparameterized SQL query.
Published: 2023-07-18T17:57:23.111Z
Updated: 2024-10-21T15:56:44.807Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.