HCL BigFix AEX is affected by multiple security vulnerabilities. (HCL Software BigFix AEX)
At a glance
- Source
- CVE.org
- EPSS
- EPSS 0.34 % · percentile 27 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- HCL
Description
HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensitive technical information, including stack traces, system details, or internal paths, potentially facilitating further attacks.
Weaknesses (CWE)
- CWE-209 — Generation of Error Message Containing Sensitive Information
- CWE-391 — DEPRECATED: Unchecked Error Condition
- CWE-755 — Improper Handling of Exceptional Conditions
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | HCL |
European references
- ENISA EUVD · EUVD-2026-112031
- GCVE · GCVE-0-2026-67080
Affected products
| Product | Versions |
|---|---|
| HCL Software · BigFix AEX | affected v13.0.0.1 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |