HCL BigFix Platform 9.5
Approved changes feed: RSS · Atom
cpe:2.3:a:hcltech:bigfix_platform:9.5:*:*:*:*:*:*:*
part: a version: 9.5 update: *
| Vendor | Hcltech (be2dce80-cb79-5854-9fe6-9b4a1139ec3e) |
|---|---|
| Product | Bigfix Platform (91d2ac87-586b-5dff-80f0-c4698aee2b1a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-23583 |
vulnerable | 2026-06-08 06:29:39.963366 |
HCL BigFix Platform is susceptible to insufficiently protected credentials
MEDIUM (6.7)
An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client Deploy Tool on Windows systems.
Published: 2024-05-17T23:06:36.167Z
Updated: 2024-08-01T23:06:25.252Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23556 |
vulnerable | 2026-06-08 06:29:39.929842 |
HCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiation
MEDIUM (5.9)
SSL/TLS Renegotiation functionality potentially leading to DoS attack vulnerability.
Published: 2024-05-17T23:40:50.064Z
Updated: 2024-10-27T13:31:28.117Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23554 |
vulnerable | 2026-06-08 06:29:39.927590 |
HCL BigFix Platform is susceptible to Cross-Site Request Forgery
MEDIUM (5.7)
Cross-Site Request Forgery (CSRF) on Session Token vulnerability that could potentially lead to Remote Code Execution (RCE).
Published: 2024-05-17T23:31:39.585Z
Updated: 2024-08-01T23:06:25.219Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37536 |
vulnerable | 2026-06-08 06:08:15.575920 |
HCL BigFix Platform is vulnerable to an integer overflow in xerces-c++ 3.2.3
HIGH (8.2)
An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request.
Published: 2023-10-11T06:46:01.750Z
Updated: 2025-02-13T17:01:28.350Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.