bigfix_mcm_mobile vulnerabilities
CVEs whose affected-version data names the bigfix_mcm_mobile package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-65022Medium· 6.3BigFix Mobile is affected by a Cross-site scripting vulnerability
The MDM App Catalog / App Store preview does not properly sanitize or encode user-supplied HTML before rendering it. Injected HTML can be displayed to users who view the preview, which may allow cross-site scripting (XSS) when a user in…
▾ SunlitHCLSoftware · BigFix MCM & MobileEPSS 0.17%via CVEORG
CVE-2026-108018Medium· 6.3BigFix Mobile is affected by sensitive information disclosure
The BigFix MCM admin portal is directly accessible from the internet without VPN or network restriction. A client-side configuration file discloses non-sensitive environment details. Exposing the configuration file publicly increases th…
▾ SunlitHCLSoftware · BigFix MCM & MobileEPSS 0.17%via CVEORG