Bigfix Aex
Approved changes feed: RSS · Atom
cpe:2.3:a:hcl_software:bigfix_aex:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Hcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847) |
|---|---|
| Product | Bigfix Aex (477470c8-afc3-5cc9-8b93-b91e70aef6b7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-21830 |
vulnerable | 2026-11-03 10:17:53.332084 |
HCL BigFix AEX is affected by multiple security vulnerabilities.
LOW (3.7)
HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent to unintended or non‐AWS endpoints.
Published: 2026-10-28T12:37:35.527Z
Updated: 2026-11-06T18:34:12.627Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-67080 |
vulnerable | 2026-11-03 10:16:18.744177 |
HCL BigFix AEX is affected by multiple security vulnerabilities.
MEDIUM (6.5)
HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensitive technical information, including stack traces, system details, or internal paths, potentially facilitating further attacks.
Published: 2026-10-28T12:25:19.455Z
Updated: 2026-11-06T18:36:17.071Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-67079 |
vulnerable | 2026-11-03 10:16:18.672726 |
HCL BigFix AEX is affected by multiple security vulnerabilities.
MEDIUM (6.4)
HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and trick users into performing unintended actions, potentially leading to unauthorized transactions or changes to their accounts.
Published: 2026-10-28T12:25:55.234Z
Updated: 2026-11-05T18:28:59.468Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-67074 |
vulnerable | 2026-11-03 10:16:18.544137 |
HCL BigFix AEX is affected by multiple security vulnerabilities.
CRITICAL (9.1)
HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentially leading to unauthorized access, data exposure, or system compromise.
Published: 2026-10-28T12:22:54.795Z
Updated: 2026-11-06T18:36:50.186Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-67073 |
vulnerable | 2026-11-03 10:16:18.412754 |
HCL BigFix AEX is affected by multiple security vulnerabilities.
HIGH (8.6)
HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or unauthorized files and directly access or download sensitive uploaded content, potentially leading to information disclosure, unauthorized access, or system compromise.
Published: 2026-10-28T12:24:30.101Z
Updated: 2026-11-06T18:36:32.324Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-67077 |
vulnerable | 2026-11-03 10:16:18.383474 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.