Skip to content
CVE PROGRAM SOURCE RECORD3.1 Low

CVE-2026-21840

HCL BigFix Platform is affected by a user enumeration vulnerability

Description

HCL BigFix Platform is affected by a user enumeration vulnerability which might allow an attacker, through careful system control and response time monitoring, to perform some level of user enumeration for the BigFix service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCLSoftware HCL BigFix Platform

Default version status: unaffected

  • 10.0.0 - 10.0.15, 11.0.0 - 11.0.5affected

References