Filtered by vendor Hcltech
Subscriptions
Filtered by product Bigfix Mobile
Subscriptions
Total
6 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2023-28012 | 1 Hcltech | 1 Bigfix Mobile | 2024-10-15 | 5.4 Medium |
| HCL BigFix Mobile is vulnerable to a command injection attack. An authenticated attacker could run arbitrary shell commands on the WebUI server. | ||||
| CVE-2023-28014 | 1 Hcltech | 1 Bigfix Mobile | 2024-10-15 | 6.6 Medium |
| HCL BigFix Mobile is vulnerable to a cross-site scripting attack. An authenticated attacker could inject malicious scripts into the application. | ||||
| CVE-2021-27783 | 1 Hcltech | 2 Bigfix Mobile, Bigfix Modern Client Management | 2024-09-16 | 6.8 Medium |
| User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed. | ||||
| CVE-2021-27780 | 1 Hcltech | 2 Bigfix Mobile, Modern Client Management | 2024-09-16 | 5.3 Medium |
| The software may be vulnerable to both Un-Auth XML interaction and unauthenticated device enrollment. | ||||
| CVE-2021-27781 | 1 Hcltech | 2 Bigfix Mobile, Modern Client Management | 2024-09-16 | 6.6 Medium |
| The Master operator may be able to embed script tag in HTML with alert pop-up display cookie. | ||||
| CVE-2021-27782 | 1 Hcltech | 1 Bigfix Mobile | 2024-08-03 | 5.4 Medium |
| HCL BigFix Mobile / Modern Client Management Admin and Config UI passwords can be brute-forced. User should be locked out for multiple invalid attempts. | ||||
Page 1 of 1.