Hcltech Bigfix Platform vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Hcltech Bigfix Platform: 4 record(s), with affected versions and fixes.cpe:2.3:a:hcltech:bigfix_platform
CVE-2026-21767
Low · 3.3
CWE-306 Apr 1, 2026
HCL BigFix Platform is affected by insufficient authentication
HCL BigFix Platform is affected by insufficient authentication. The application might allow users to access sensitive areas of the application without proper authentication.
CVE-2026-21765
High · 7.8
CWE-276 Apr 1, 2026
HCL BigFix Platform is affected by insecure permissions on private cryptographic keys
HCL BigFix Platform is affected by insecure permissions on private cryptographic keys. The private cryptographic keys located on a Windows host machine might be subject to overly permissive file system permissions.
CVE-2022-27545
Medium · 5.4
CWE-79 Jul 19, 2022
HCL BigFix Web Reports authorized users may perform HTML injection.
BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page.
CVE-2022-27544
Medium · 6.5
CWE-522 Jul 19, 2022
HCL BigFix Web Reports authorized users may see sensitive information in clear text
BigFix Web Reports authorized users may see SMTP credentials in clear text.