BC
Product
Bigfix Compliance
10
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 8Low 1
Watch
Add Bigfix Compliance to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-27756 | 7.5 | Mar 4 | "TLS-RSA cipher suites are not disabled in BigFix Compliance up to v2.0.5 Affected: 2.0 before 2.0.6 |
| CVE-2024-23551 | 6.5 | May 7 | HCL BigFix Compliance is potentially affected by Oracle database credentials stored at endpoint Affected: 9.0.835.0 through 9.5.25.11; 10.0.0.133 through 10.0.5.0; 11.0.0.175 through 11.0.2.125 |
| CVE-2024-30125 | 6.2 | Jul 18 | HCL BigFix Compliance is affected by an internal server error Affected: before 2.0.11 |
| CVE-2024-42212 | 5.4 | May 5 | HCL BigFix Compliance is affected by an improper or missing SameSite attribute Affected: 2.0.12 |
| CVE-2024-30140 | 5.4 | Nov 7 | HCL BigFix Compliance is affected by unvalidated redirects and forwards Affected: 2.0.11 |
| CVE-2023-37525 | 5.3 | Jan 28 | HCL BigFix Compliance is vulnerable to a sensitive information disclosure Affected: 2.0.9 |
| CVE-2024-42213 | 5.3 | May 5 | HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment Affected: 2.0.12 |
| CVE-2024-30141 | 4.7 | Nov 7 | HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information Affected: 2.0.11 |
| CVE-2024-30126 | 4.7 | Jul 18 | HCL BigFix Compliance is affected by a missing X-Frame-Options Header vulnerability Affected: before 2.0.11 |
| CVE-2024-30142 | 3.8 | Nov 7 | HCL BigFix Compliance is affected by a missing secure flag on a cookie Affected: 2.0.11 |
Showing 10