Approved changes feed: RSS · Atom

cpe:2.3:a:hcl_software:bigfix_remote_control:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847)
ProductBigfix Remote Control (ec34e622-7de5-5c63-90a6-8a4924bf71f8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-59849 vulnerable 2026-06-08 07:35:23.307524 HCL BigFix Remote Control is vulnerable to an insecure CSP configuration
MEDIUM (4.7)
Improper management of Content Security Policy in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow the execution of malicious code in web pages.
Published: 2025-12-17T20:28:22.768Z
Updated: 2025-12-17T20:45:21.930Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55254 vulnerable 2026-06-08 07:33:14.541506 HCL BigFix Remote Control is vulnerable to a Path-relative stylesheet import (PRSSI)
LOW (3.7)
Improper management of Path-relative stylesheet import in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow to execute malicious code in certain web pages.
Published: 2025-12-17T20:46:39.219Z
Updated: 2025-12-18T15:09:36.545Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31965 vulnerable 2026-06-08 07:18:58.878754 HCL BigFix Remote Control is affected by an authorization bypass vulnerability
HIGH (8.2)
Improper access restrictions in HCL BigFix Remote Control Server WebUI (versions 10.1.0.0248 and lower) allow non-admin users to view unauthorized information on certain web pages.
Published: 2025-07-29T16:53:03.338Z
Updated: 2025-07-29T18:32:30.900Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.