Sound the depths of every vulnerability.

▾ Sunlithcltech · bigfix_service_managementEPSS 0.21%via NVD

HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive information in error messages when invalid inputs are sent to certain API endpoints

HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive information in error messages when invalid inputs are sent to certain API endpoints . This information could enable an…

CVE-2026-67171Medium· 5.3

▾ Sunlithcltech · bigfix_service_managementEPSS 0.24%via NVD

HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint exposes sensitive internal database information

HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint exposes sensitive internal database information. This information could enable an attacker to facilitate targeted databa…

CVE-2025-31980Medium· 4.3

▾ Sunlithcltech · bigfix_service_managementEPSS 0.16%via NVD

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstre…

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstre…

CVE-2026-67106Medium· 5.3

▾ Sunlithcltech · bigfix_service_managementEPSS 0.24%via NVD

HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data

HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data. This information could enable an attacker to launch further, more serious attacks.

CVE-2026-67105High· 7.4

▾ Twilighthcltech · bigfix_service_managementEPSS 0.15%via NVD

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of s…

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of s…

CVE-2026-67104Medium· 5.3

▾ Sunlithcltech · bigfix_service_managementEPSS 0.24%via NVD

HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly accessible JavaScript files, enabling the discovery of hidden administrative API endp…

HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly accessible JavaScript files, enabling the discovery of hidden administrative API endp…

CVE-2026-56599Low· 2.2

▾ Sunlithcltech · bigfix_service_managementEPSS 0.06%via NVD

HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to exploit missing security attributes such as SameSite, HttpOnly, Secure, and restrictive Paths, enabli…

HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to exploit missing security attributes such as SameSite, HttpOnly, Secure, and restrictive Paths, enabli…

CVE-2026-56589High· 7.2

▾ Twilighthcltech · bigfix_service_managementEPSS 0.20%via NVD

HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page…

HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page…

CVE-2026-21806Low· 3.1

▾ Sunlithcltech · bigfix_service_managementEPSS 0.20%via NVD

HCL BigFix Service Management is affected by an Administrative Session Concurrency vulnerability

HCL BigFix Service Management is affected by an Administrative Session Concurrency vulnerability. The application allows multiple simultaneous authenticated sessions for the same administrative account, which could enable an unauthorized…

CVE-2026-21848Medium· 5.0

▾ Sunlithcltech · bigfix_service_managementEPSS 0.27%via NVD

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across…

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across…

CVE-2026-56590Medium· 6.4

▾ Sunlithcltech · bigfix_service_managementEPSS 0.19%via NVD

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a compl…

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a compl…

CVE-2026-56597Low· 3.1

▾ Sunlithcltech · bigfix_service_managementEPSS 0.17%via NVD

HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from the application's responses, enabling them to map the underly…

HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from the application's responses, enabling them to map the underly…

CVE-2026-56595Low· 3.1

▾ Sunlithcltech · bigfix_service_managementEPSS 0.15%via NVD

HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker to craft a malicious web page that interacts with the vulnerable application, en…

HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker to craft a malicious web page that interacts with the vulnerable application, en…

CVE-2026-56592Medium· 6.5

▾ Sunlithcltech · bigfix_service_managementEPSS 0.29%via NVD

HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthenticated attacker to execute sustained brute-force attacks against the l…

HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthenticated attacker to execute sustained brute-force attacks against the l…

CVE-2026-67103High· 7.6

▾ Twilighthcltech · bigfix_service_managementEPSS 0.20%via NVD

HCL BigFix Service Management is affected by Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject unsanitized malicious scripts that execute in a victim's browser, enabling session hijacking, account takeover…

HCL BigFix Service Management is affected by Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject unsanitized malicious scripts that execute in a victim's browser, enabling session hijacking, account takeover…

CVE-2026-67102High· 8.1

▾ Twilighthcltech · bigfix_service_managementEPSS 0.35%via NVD

HCL BigFix Service Management is affected by a high-severity Broken Access Control vulnerability, which could allow a low-privileged user to gain unauthorized access to administrative screens and functions reserved for higher-privileged …

HCL BigFix Service Management is affected by a high-severity Broken Access Control vulnerability, which could allow a low-privileged user to gain unauthorized access to administrative screens and functions reserved for higher-privileged …

CVE-2026-67101Critical· 9.3

▾ Midnighthcltech · bigfix_service_managementEPSS 0.26%via NVD

HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability in its search functionality, which could allow an attacker to force the application server to send requests to internal systems that are not …

HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability in its search functionality, which could allow an attacker to force the application server to send requests to internal systems that are not …

CVE-2026-67100Critical· 9.8

▾ Midnighthcltech · bigfix_service_managementEPSS 0.47%via NVD

HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities

HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities. which could allow an authenticated attacker to inject database commands to extract sensitive system details, as well a…

CVE-2023-37508Medium· 6.1

3mo ago

HCL DevOps Plan is potentially susceptible to Cross-Site Scripting (XSS) which could allow an attacker to exploit this vulnerability if certain browser weaknesses are present.

▾ Sunlithcltech · devops_planEPSS 0.22%via NVD

CVE-2023-37507High· 7.5

3mo ago

HCL DevOps Plan is susceptible to an information disclosure that can allow an attacker to focus their attacks based upon the information revealed.

▾ Twilighthcltech · devops_planEPSS 0.42%via NVD

CVE-2026-35145Low· 3.1

3mo ago

HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability

HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability. The application fails to implement the HTTP Strict Transport Security (HSTS) policy within its responses, which could allow a remote attacker …

▾ Sunlithcltech · dfxanalyticsEPSS 0.27%via NVD

CVE-2025-59868Medium· 5.5

▾ Sunlithcltech · traveler_for_microsoft_outlookEPSS 0.15%via NVD

HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a sensitive data exposure vulnerability which could allow an attacker to exploit application information to then attempt additional attacks and cause unknown behavior in the app…

HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a sensitive data exposure vulnerability which could allow an attacker to exploit application information to then attempt additional attacks and cause unknown behavior in the app…

CVE-2024-23581Medium· 6.7

▾ Sunlithcltech · traveler_for_microsoft_outlookEPSS 0.09%via NVD

The HCL Traveler for Microsoft Outlook libraries are being flagged as potentially malicious software or an unrecognized application.

CVE-2025-62340Low· 3.1

▾ Sunlithcltech · icontrolEPSS 0.20%via NVD

HCL iControl was affected by Inadequate Session Timeout vulnerability

HCL iControl was affected by Inadequate Session Timeout vulnerability. The vulnerability involves a security risk where a web application fails to automatically terminate user sessions after a period of inactivity

CVE-2025-59872Medium· 4.3