HCL Software BigFix Platform
22 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-108013 | Platform 11.0.7 and below + 10.0.16 and below | HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID) | MEDIUM 6.8 | 0.2 % | ||
| CVE-2024-30117 | 9.5 - 9.5.24, 10.0 - 10.0.11, 11.0.0 - 11.0.2 | HCL BigFix Platform is affected by a DLL Hijack vulnerability | MEDIUM 5.3 | 0.2 % | ||
| CVE-2024-23556 | 9.5 - 9.5.24, 10 - 10.0.11 | HCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiation | HIGH 7.5 | 0.4 % | ||
| CVE-2024-23554 | 9.5 - 9.5.24, 10 - 10.0.11, 11.0.1 | HCL BigFix Platform is susceptible to Cross-Site Request Forgery | HIGH 8.8 | 0.3 % | ||
| CVE-2024-23583 | 9.5 - 9.5.24, 10 - 10.0.11, 11.0.1 | HCL BigFix Platform is susceptible to insufficiently protected credentials | MEDIUM 6.7 | 0.2 % | ||
| CVE-2023-45715 | 9.5 - 9.5.23, 10.0 - 10.0.10, 11.0.0 - 11.0.1 | HCL BigFix Platform is susceptible to a Denial of Service attack | MEDIUM 4.3 | 0.4 % | ||
| CVE-2023-45706 | 9.5 - 9.5.23, 10.0 - 10.0.10, 11.0.0 - 11.0.1 | HCL BigFix Platform is susceptible to Cross Site Scripting (XSS) and/or Man in the Middle (MITM) attack | MEDIUM 4.0 | 0.3 % | ||
| CVE-2023-45705 | 10.0 - 10.0.10, 11.0.0 - 11.0.1 | HCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF) | HIGH 7.2 | 0.4 % | ||
| CVE-2023-37528 | 9.5 - 9.5.23, 10 - 10.0.9 | A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform | MEDIUM 6.5 | 0.3 % | ||
| CVE-2024-23553 | 9.5 - 9.5.23, 10 - 10.0.10 | A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform | MEDIUM 5.4 | 0.3 % | ||
| CVE-2023-37531 | 9.5 - 9.5.23, 10 - 10.0.10 | A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform | MEDIUM 4.8 | 0.4 % | ||
| CVE-2023-37530 | 9.5 - 9.5.23, 10 - 10.0.10 | A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform | MEDIUM 5.4 | 0.3 % | ||
| CVE-2023-37529 | 9.5 - 9.5.23, 10 - 10.0.10 | A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform | MEDIUM 5.4 | 0.3 % | ||
| CVE-2023-37527 | 9.5 - 9.5.23, 10 - 10.0.10 | A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform | MEDIUM 6.1 | 0.4 % | ||
| CVE-2023-37536 | 9.5 - 9.5.22, 10 - 10.0.9 | HCL BigFix Platform is vulnerable to an integer overflow in xerces-c++ 3.2.3 | HIGH 8.8 | 1.9 % | ||
| CVE-2022-42453 | 9.5 - 9.5.20, 10 - 10.0.7 | HCL BigFix Platform is affected by insufficient warnings | MEDIUM 6.9 | 0.3 % | ||
| CVE-2022-38659 | 9.5 - 9.5.20, 10 - 10.0.7 | HCL BigFix Platform is affected by insecure credential storage | HIGH 7.8 | 0.1 % | ||
| CVE-2021-27767 | 9.5 - 9.5.18, 10 - 10.0.5 | HCL BigFix Platform Console is affected by a Privilege Escalation Vulnerability | HIGH 7.8 | 0.2 % | ||
| CVE-2021-27766 | 9.5 - 9.5.18, 10 - 10.0.5 | HCL BigFix Platform Client is affected by a Privilege Escalation Vulnerability | HIGH 7.8 | 0.2 % | ||
| CVE-2021-27765 | 9.5 - 9.5.18, 10 - 10.0.5 | HCL BigFix Platform Server API is affected by Privilege Escalation Vulnerability | HIGH 7.8 | 0.3 % | ||
| CVE-2021-27762 | 9.5 - 9.5.18, 10 - 10.0.5 | HCL BigFix Platform is affected by misconfigured security-related HTTP headers | CRITICAL 9.8 | 0.7 % | ||
| CVE-2021-27761 | 9.5 - 9.5.18, 10 - 10.0.5 | HCL BigFix Platform is affected by weak web transport security | HIGH 7.5 | 0.4 % |