Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-67104

HCL BigFix Service Management is affected by multiple security vulnerabilities.

Description

HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly accessible JavaScript files, enabling the discovery of hidden administrative API endpoints for further targeted exploitation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software HCL BigFix Service Management

Default version status: unaffected

  • Version 27affected

References