Login Request a demo
BW
Product
Bigfix Webui
by Hcltech · last CVE Jul 18, 2023
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 2Medium 5Low 0
Severity
All severities7Critical0High2Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Bigfix Webui to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-28019
8.8
0%
Jul 18
Insufficient validation in Bigfix WebUI API App site version < 14 allows an authenticated WebUI user to issue SQL queries via an unparameterized SQL query
Affected: before 14
CVE-2023-28021
7.5
0%
Jul 18
The BigFix WebUI uses weak cipher suites
Affected: All versions, or not specified
CVE-2023-28023
6.5
0%
Jul 18
A cross site request forgery vulnerability in the BigFix WebUI Software Distribution interface site version 44 and before allows an NMO attacker to access files on server side…
Affected: through 44
CVE-2021-27764
6.5
1%
May 6
Cookie without HTTPONLY flag set
Affected: All versions, or not specified
CVE-2023-28020
6.1
0%
Jul 18
URL redirection in Login page in HCL BigFix WebUI allows malicious user to redirect the client browser to an external site via redirect URL response header
Affected: All versions, or not specified
CVE-2022-38655
5.8
0%
Dec 21
BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of fixlets or to deploy fixlets from the BES Support external site
Affected: 20
CVE-2020-4104
5.4
1%
Jul 17
HCL BigFix WebUI is vulnerable to stored cross-site scripting (XSS) within the Apps->Software module
Affected: All versions, or not specified
Showing 7