Hcltech HCL any version

HCL BigFix Platform is affected by misconfigured security-related HTTP headers

HCL BigFix Platform is vulnerable to an integer overflow in xerces-c++ 3.2.3

HCL BigFix Platform is susceptible to Cross-Site Request Forgery

HCL BigFix Platform is affected by insecure permissions on private cryptographic keys

HCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attack

HCL BigFix Platform Server API is affected by Privilege Escalation Vulnerability

HCL BigFix Platform Client is affected by a Privilege Escalation Vulnerability

HCL BigFix Platform Console is affected by a Privilege Escalation Vulnerability

HCL BigFix Platform is affected by insecure credential storage

HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)

HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)

TLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2. If TLS 2.0 and secure ciphers are not enabled then an attacker can passively record traffic and later decrypt it.

HCL BigFix Platform is affected by weak web transport security

HCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiation

HCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF)

HCL BigFix Platform is affected by insufficient warnings

HCL BigFix Platform is susceptible to insufficiently protected credentials

HCL BigFix Web Reports authorized users may see sensitive information in clear text

A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack

A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

"BigFix Platform is storing clear text credentials within the system's memory. An attacker who is able to gain administrative privileges can use a program to create a memory dump and extract the credentials. These credentials can be used to pivot further into the environment. The principle of least privilege should be applied to all BigFix deployments, limiting administrative access."

A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

HCL BigFix Web Reports authorized users may perform HTML injection.

A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

HCL BigFix Web Reports is potentially susceptible to a Stored Cross-Site Scripting (XSS) attack

BigFix Inventory up to v10.0.2 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.

HCL BigFix Platform is affected by a DLL Hijack vulnerability

A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

HCL BigFix Platform is susceptible to a Denial of Service attack

HCL BigFix Platform is susceptible to Cross Site Scripting (XSS) and/or Man in the Middle (MITM) attack

HCL BigFix Platform is affected by insufficient authentication