bigfix_platform vulnerabilities
CVEs whose affected-version data names the bigfix_platform package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-108013Medium· 6.8HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID)
BigFix Platform uses Mozilla CA certificate bundle (PEM). Versions of the bundle dated before 2026/10/20 still trust certificates whose private keys have been compromised. When BigFix Platform validates servers using such a bundle, an on…
▾ SunlitHCL Software · BigFix PlatformEPSS 0.16%via CVEORG
CVE-2022-27545Medium· 4.6BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page.
BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page.
▾ Sunlithcltech · bigfix_platformEPSS 0.34%via NVD
CVE-2022-27544Medium· 5.0BigFix Web Reports authorized users may see SMTP credentials in clear text.
BigFix Web Reports authorized users may see SMTP credentials in clear text.
▾ Sunlithcltech · bigfix_platformEPSS 0.46%via NVD