3.1Niedrig

CVE-2026-56595HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL Software HCL BigFix Service Management Veröffentlicht: (vor 1 Monat)

Beschreibung

HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker to craft a malicious web page that interacts with the vulnerable application, enabling unauthorized access to protected resources and restricted APIs on behalf of a victim.

Schwachstellentyp (CWE): CWE-942

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
HCL Software HCL BigFix Service Management v27
hcltech bigfix service management 23

Referenzen und Patches

CPE-Treffer (NVD) (2)

  • cpe:2.3:a:hcltech:bigfix_service_management:23:-:*:*:*:*:*:*
  • cpe:2.3:a:hcltech:bigfix_service_management:27:-:*:*:*:*:*:*