Bigfix Service Management vulnerabilities
12 known vulnerabilities in Bigfix Service Management from HCL Software. 12 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.4 High severity
HCL BigFix Service Management: Cleartext Transmission of Sensitive Information
HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and poten
- 7.2 High severity
HCL BigFix Service Management: Improper Neutralization of Input During Web Page Generation
HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hija
- 9.8 Critical severity
HCL BigFix Service Management is affected by an Administrative Session Concurrency…
HCL BigFix Service Management is affected by an Administrative Session Concurrency vulnerability. The application allows multiple simultaneous authenticated sessions for the same administrative account, which could enable an unauthorized attacker to predict or
- 9.8 Critical severity
HCL BigFix Service Management: Improper Restriction of Excessive Authentication Attempts
HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthenticated attacker to execute sustained brute-force attacks against the login interface, resulti
- 9.8 Critical severity
HCL BigFix Service Management: Unrestricted Upload of File with Dangerous Type
HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise.
- 8.1 High severity
HCL BigFix Service Management: Improper Authorization
HCL BigFix Service Management is affected by a high-severity Broken Access Control vulnerability, which could allow a low-privileged user to gain unauthorized access to administrative screens and functions reserved for higher-privileged roles.
- 9.8 Critical severity
HCL BigFix Service Management: Improper Neutralization of Special Elements used in an SQL Command
HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities. which could allow an authenticated attacker to inject database commands to extract sensitive system details, as well as manipulate request va
- 7.2 High severity
BigFix Service Management (SM): Initialization of a Resource with an Insecure Default
HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only. An improperly configured root file system may allow unintended modifications to critical system components, potentially increasing the risk of system compromise o
- 8.3 High severity
BigFix Service Management (SM): Insertion of Sensitive Information into Log File
HCL BigFix Service Management (SX) is affected by a Broken Access Control vulnerability leading to privilege escalation. This could allow unauthorized users to gain elevated privileges, bypassing intended access restrictions. This may result in exposure of sen
- 8.8 High severity
BigFix Service Management (SM): Exposure of Sensitive Information to an Unauthorized Actor
HCL BigFix Service Management (SM) is affected by use of a vulnerable WSGI Server was identified. Deploying an outdated or insecure WSGI server may expose the application to known security weaknesses, potentially increasing the risk of exploitation and unautho
- 7.5 High severity
BigFix Service Management (SM): Insufficiently Protected Credentials
HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while communicating with a backend, internal application which could allow an attacker to potentially misuse them, if exfiltrated. .
- 8.2 High severity
BigFix Service Management (SM): Inconsistent Interpretation of HTTP Requests
HCL BigFix Service Management is susceptible to HTTP Request Smuggling. HTTP request smuggling vulnerabilities arise when websites route HTTP requests through web servers with inconsistent HTTP parsing. HTTP Smuggling exploits inconsistencies in request parsin