What’s Vulnerable › Products

HCLSoftware BigFix IVR vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your HCLSoftware BigFix IVR version is affected

Latest HCLSoftware BigFix IVR vulnerabilities

• CVE-2025-31964 — HCL BigFix IVR is impacted by an improper service binding configuration (CVSS 4.9)
• CVE-2025-31963 — HCL BigFix IVR is impacted by improper authentication and missing CSRF protection (CVSS 3.3)
• CVE-2025-31962 — HCL BigFix IVR is impacted by an insufficient session expiration vulnerability (CVSS 4.3)
• CVE-2022-44758 — HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper credential handling (CVSS 5.3)
• CVE-2022-44757 — HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to weak cryptography (CVSS 8.2)