Bigfix Inventory
Approved changes feed: RSS · Atom
cpe:2.3:a:hcl_software:bigfix_inventory:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847) |
|---|---|
| Product | Bigfix Inventory (8ebc7b97-6153-5379-8351-be900a8ae911) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-42194 |
vulnerable | 2026-06-08 06:43:56.286707 |
HCL BigFix Inventory is affected by an access control vulnerability
LOW (3.1)
An improper handling of insufficient permissions or privileges affects HCL BigFix Inventory. An attacker having access via a read-only account can possibly change certain configuration parameters by crafting a specific REST API call.
Published: 2024-12-17T17:28:24.872Z
Updated: 2024-12-17T20:37:59.293Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23540 |
vulnerable | 2026-06-08 06:29:39.897706 |
HCL BigFix Inventory is vulnerable to path traversal
MEDIUM (5.3)
The HCL BigFix Inventory server is vulnerable to path traversal which enables an attacker to read internal application files from the Inventory server. The BigFix Inventory server does not properly restrict the served static file.
Published: 2024-04-03T16:32:51.950Z
Updated: 2024-08-01T23:06:25.219Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.