Hcltech

Bigfix Platform

26 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2024-30117

  • EPSS 0.08%
  • Published 14.10.2024 23:15:11
  • Last modified 17.10.2024 21:01:17

A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file under some circumstances.

5.9

CVE-2024-23556

  • EPSS 0.13%
  • Published 18.05.2024 00:15:07
  • Last modified 21.11.2024 08:57:55

SSL/TLS Renegotiation functionality potentially leading to DoS attack vulnerability.

5.7

CVE-2024-23554

  • EPSS 0.24%
  • Published 18.05.2024 00:15:07
  • Last modified 21.11.2024 08:57:55

Cross-Site Request Forgery (CSRF) on Session Token vulnerability that could potentially lead to Remote Code Execution (RCE).

6.7

CVE-2024-23583

  • EPSS 0.04%
  • Published 17.05.2024 23:15:06
  • Last modified 21.11.2024 08:57:57

An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client Deploy Tool on Windows systems.

7.2

CVE-2023-45705

  • EPSS 0.23%
  • Published 28.03.2024 15:15:45
  • Last modified 28.03.2025 21:15:15

An administrative user of WebReports may perform a Server Side Request Forgery (SSRF) exploit through SMTP configuration options.

4.8

CVE-2023-37531

  • EPSS 0.54%
  • Published 29.02.2024 01:40:04
  • Last modified 03.06.2025 19:15:33

A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a form field of a webpage by a user with privileged access.

5.4

CVE-2023-37530

  • EPSS 0.6%
  • Published 29.02.2024 01:40:04
  • Last modified 03.06.2025 19:15:33

A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage trying to retrieve cookie stored information.

5.4

CVE-2023-37529

  • EPSS 0.6%
  • Published 29.02.2024 01:40:04
  • Last modified 03.06.2025 19:15:33

A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage trying to retrieve cookie stored information. This is not the same vuln...

6.1

CVE-2023-37528

  • EPSS 0.28%
  • Published 03.02.2024 06:15:46
  • Last modified 03.06.2025 19:15:32

A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attack to exploit an application parameter during execution of the Save Report.

5.4

CVE-2024-23553

  • EPSS 0.31%
  • Published 02.02.2024 21:15:08
  • Last modified 03.06.2025 19:15:38

A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform exists due to missing a specific http header attribute.