Hcl Bigfix Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:hcl_software:hcl_bigfix_platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847) |
|---|---|
| Product | Hcl Bigfix Platform (0f7f7e32-1aa8-5b25-b205-bc863a9f1b1b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-42200 |
vulnerable | 2026-06-08 06:43:56.292637 |
HCL BigFix Web Reports is potentially susceptible to a Stored Cross-Site Scripting (XSS) attack
HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially weak validation of user input.
Published: 2025-04-15T18:00:17.561Z
Updated: 2025-04-15T18:32:36.345Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42193 |
vulnerable | 2026-06-08 06:43:56.284527 |
HCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attack
HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle (MITM) attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized access.
Published: 2025-04-15T18:16:01.247Z
Updated: 2025-04-15T18:51:09.135Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42189 |
vulnerable | 2026-06-08 06:43:56.278719 |
HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack
HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack, due to a potentially weak validation of an API parameter.
Published: 2025-04-15T18:07:40.703Z
Updated: 2025-04-15T18:21:41.257Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37520 |
vulnerable | 2026-06-08 06:08:15.553163 |
HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)
HIGH (7.7)
Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data exfiltration. This XSS vulnerability is in the Gather Status Report, which is served by the BigFix Relay.
Published: 2023-12-21T22:13:47.339Z
Updated: 2024-08-02T17:16:30.415Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37519 |
vulnerable | 2026-06-08 06:08:15.551369 |
HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)
HIGH (7.7)
Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. This XSS vulnerability is in the Download Status Report, which is served by the BigFix Server.
Published: 2023-12-21T21:44:20.069Z
Updated: 2025-04-23T16:21:10.652Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.