What’s Vulnerable › Products

HCL Software BigFix Platform vulnerabilities

34 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your HCL Software BigFix Platform version is affected

Latest HCL Software BigFix Platform vulnerabilities

• CVE-2026-108013 — HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID) (CVSS 6.8)
• CVE-2026-21767 — HCL BigFix Platform is affected by insufficient authentication (CVSS 3.3)
• CVE-2026-21765 — HCL BigFix Platform is affected by insecure permissions on private cryptographic keys (CVSS 7.8)
• CVE-2024-42193 — HCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attack (CVSS 8.1)
• CVE-2024-42200 — HCL BigFix Web Reports is potentially susceptible to a Stored Cross-Site Scripting (XSS) attack (CVSS 5.4)
• CVE-2024-42189 — HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack (CVSS 6.5)
• CVE-2024-30117 — HCL BigFix Platform is affected by a DLL Hijack vulnerability (CVSS 5.3)
• CVE-2024-23556 — HCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiation (CVSS 7.5)
• CVE-2024-23554 — HCL BigFix Platform is susceptible to Cross-Site Request Forgery (CVSS 8.8)
• CVE-2024-23583 — HCL BigFix Platform is susceptible to insufficiently protected credentials (CVSS 6.7)
• CVE-2023-45715 — HCL BigFix Platform is susceptible to a Denial of Service attack (CVSS 4.3)
• CVE-2023-45706 — HCL BigFix Platform is susceptible to Cross Site Scripting (XSS) and/or Man in the Middle (MITM) attack (CVSS 4.0)
• CVE-2023-45705 — HCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF) (CVSS 7.2)
• CVE-2023-37531 — A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform (CVSS 4.8)
• CVE-2023-37530 — A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform (CVSS 5.4)
• CVE-2023-37529 — A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform (CVSS 5.4)
• CVE-2023-37528 — A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform (CVSS 6.1)
• CVE-2024-23553 — A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform (CVSS 5.4)
• CVE-2023-37527 — A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform (CVSS 6.1)
• CVE-2023-37520 — HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS) (CVSS 6.1)
• CVE-2023-37519 — HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS) (CVSS 6.1)
• CVE-2023-37536 — HCL BigFix Platform is vulnerable to an integer overflow in xerces-c++ 3.2.3 (CVSS 8.8)
• CVE-2022-42453 — HCL BigFix Platform is affected by insufficient warnings (CVSS 6.5)
• CVE-2022-38659 — HCL BigFix Platform is affected by insecure credential storage (CVSS 7.8)
• CVE-2022-27545 — HCL BigFix Web Reports authorized users may perform HTML injection. (CVSS 5.4)