HCL BigFix WebUI
Approved changes feed: RSS · Atom
cpe:2.3:a:hcltech:bigfix_webui:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Hcltech (be2dce80-cb79-5854-9fe6-9b4a1139ec3e) |
|---|---|
| Product | Bigfix Webui (e9cb9673-9d9c-52ea-8c46-ee1d8b134317) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-28021 |
vulnerable | 2026-06-08 05:57:42.858185 |
BigFix WebUI is vulnerable to use of a risky cryptographic algorithm
MEDIUM (5.9)
The BigFix WebUI uses weak cipher suites.
Published: 2023-07-18T18:55:20.641Z
Updated: 2024-10-21T15:35:37.122Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28020 |
vulnerable | 2026-06-08 05:57:42.857700 |
URL redirection affects BigFix WebUI
MEDIUM (4.7)
URL redirection in Login page in HCL BigFix WebUI allows malicious user to redirect the client browser to an external site via redirect URL response header.
Published: 2023-07-18T18:09:13.190Z
Updated: 2024-10-21T15:35:13.891Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27764 |
vulnerable | 2026-06-08 05:31:22.128392 |
HCL BigFix WebUI Cookie missing attributes
HIGH (7.4)
Cookie without HTTPONLY flag set. NUMBER cookie(s) was set without Secure or HTTPOnly flags. The images show the cookie with the missing flag. (WebUI)
Published: 2022-05-06T18:10:35.347Z
Updated: 2024-09-16T19:09:03.206Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4104 |
vulnerable | 2026-06-08 05:25:58.914014 |
Details available
HCL BigFix WebUI is vulnerable to stored cross-site scripting (XSS) within the Apps->Software module. An attacker can use XSS to send a malicious script to an unsuspecting user. This affects all versions prior to latest releases as specified in https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080855&sys_kb_id=971d99ed1b8ed01c086dcbfc0a4bcb6a.
Published: 2020-07-17T20:46:39.000Z
Updated: 2024-08-04T07:52:20.943Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.