Approved changes feed: RSS · Atom

cpe:2.3:a:hcl_software:bigfix_modern_client_management:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847)
ProductBigfix Modern Client Management (fea23ac0-1d08-5cce-b9c8-05e12c301510)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-0276 vulnerable 2026-06-08 07:02:24.099806 HCL BigFix Modern Client Management (MCM) is affected by an insecure Content Security Policy (CSP)
MEDIUM (6.5)
HCL BigFix Modern Client Management (MCM) 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content.
Published: 2025-10-16T08:25:49.925Z
Updated: 2025-10-16T14:10:55.323Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0274 vulnerable 2026-06-08 07:02:24.094207 HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control
MEDIUM (5.3)
HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions.
Published: 2025-10-16T04:56:49.062Z
Updated: 2025-10-16T14:32:54.597Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.