HCL BigFix AEX is affected by multiple security vulnerabilities. (HCL Software BigFix AEX)
En bref
- Source
- NVD
- EPSS
- EPSS 0.34 % · centile 27 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- HCL
- Statut NVD
- Deferred
Description
HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensitive technical information, including stack traces, system details, or internal paths, potentially facilitating further attacks.
Faiblesses (CWE)
- CWE-209 — Message d'erreur contenant des informations sensibles
- CWE-391 — DEPRECATED: Unchecked Error Condition
- CWE-755 — Gestion incorrecte des conditions exceptionnelles
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | HCL |
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | NVD · psirt@hcl.com (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2026-112031
- GCVE · GCVE-0-2026-67080
Produits affectés
| Produit | Versions |
|---|---|
| HCL Software · BigFix AEX | affected v13.0.0.1 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |