Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2026-56589

HCL BigFix Service Management is affected by multiple security vulnerabilities.

Description

HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software HCL BigFix Service Management

Default version status: unaffected

  • Version 27affected

References