CVE-2026-67079Medium· 6.4▾ SunlitHCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and trick users into performing unintended actions, potentially leading to unauthori…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and trick users into performing unintended actions, potentially leading to unauthorized transactions or changes to their accounts.
bigfix_aex v13.0.0.1Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-67074Critical· 9.1HCL BigFix AEX is affected by multiple security vulnerabilities.
CVE-2026-67080Medium· 6.5HCL BigFix AEX is affected by multiple security vulnerabilities.
CVE-2026-67073High· 8.6HCL BigFix AEX is affected by multiple security vulnerabilities.
CVE-2026-67077Medium· 4.2HCL BigFix AEX is affected by multiple security vulnerabilities.
CVE-2026-21830Low· 3.7HCL BigFix AEX is affected by multiple security vulnerabilities.
CVE-2026-108013Medium· 6.8HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID)