What’s Vulnerable › Products

HCL Software BigFix Mobile vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your HCL Software BigFix Mobile version is affected

Latest HCL Software BigFix Mobile vulnerabilities

• CVE-2025-0277 — HCL BigFix Mobile is affected by an insecure Content Security Policy (CSP) (CVSS 6.1)
• CVE-2025-0276 — HCL BigFix Modern Client Management (MCM) is affected by an insecure Content Security Policy (CSP) (CVSS 6.1)
• CVE-2025-0275 — HCL BigFix Mobile 3.3 and earlier is affected by improper access control (CVSS 4.3)
• CVE-2025-0274 — HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control (CVSS 4.3)
• CVE-2023-28014 — HCL BigFix Mobile can be affected by a cross-site scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2023-28012 — HCL BigFix Mobile can be affected by a command injection vulnerability (CVSS 8.8)
• CVE-2021-27782 — HCL BigFix Mobile / Modern Client Management Server passwords are susceptible to a brute-force attack (CVSS 7.5)
• CVE-2021-27781 — HCL BigFix Mobile / Modern Client Management is vulnerable to stored cross-site scripting (CVSS 4.8)
• CVE-2021-27780 — HCL BigFix Mobile / Modern Client Management is vulnerable to unauthenticated XML interaction (CVSS 5.3)
• CVE-2021-27783 — HCL BigFix Mobile / Modern Client Management is vulnerable to sensitive information exposure (CVSS 6.5)