3.1Düşük

CVE-2026-56595HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL Software HCL BigFix Service Management Yayım: (1 ay önce)

Açıklama

HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker to craft a malicious web page that interacts with the vulnerable application, enabling unauthorized access to protected resources and restricted APIs on behalf of a victim.

Zayıflık türü (CWE): CWE-942

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
HCL Software HCL BigFix Service Management v27
hcltech bigfix service management 23

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (2)

  • cpe:2.3:a:hcltech:bigfix_service_management:23:-:*:*:*:*:*:*
  • cpe:2.3:a:hcltech:bigfix_service_management:27:-:*:*:*:*:*:*