Approved changes feed: RSS · Atom

cpe:2.3:a:hcl_software:bigfix_query:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847)
ProductBigfix Query (0bd82602-d55f-5ba0-91e5-eeec3be29958)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-52602 vulnerable 2026-06-08 07:31:12.734433 HCL BigFix Query is affected by a sensitive information disclosure vulnerability in the WebUI Query application
MEDIUM (4.2)
HCL BigFix Query is affected by a sensitive information disclosure in the WebUI Query application.  An HTTP GET endpoint request returns discoverable responses that may disclose: group names, active user names (or IDs).  An attacker can use that information to target individuals with phishing or other social-engineering attacks.
Published: 2025-11-05T14:46:46.537Z
Updated: 2025-11-12T17:41:31.409Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.