Hcl Bigfix Service Management

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries.

Published: 2026-09-18T08:21:02.829Z
Updated: 2026-09-18T19:13:49.496Z

HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from the application's responses, enabling them to map the underlying network topology and identify potential internal targets.

Published: 2026-09-18T08:24:56.182Z
Updated: 2026-09-18T11:11:09.948Z

HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthenticated attacker to execute sustained brute-force attacks against the login interface, resulting in unauthorized system access.

Published: 2026-09-18T08:23:16.699Z
Updated: 2026-09-18T11:24:31.963Z

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise.

Published: 2026-09-18T08:22:16.082Z
Updated: 2026-09-18T19:11:46.353Z

HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker to craft a malicious web page that interacts with the vulnerable application, enabling unauthorized access to protected resources and restricted APIs on behalf of a victim.

Published: 2026-09-18T08:25:39.544Z
Updated: 2026-09-18T10:50:27.003Z