Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2026-67172

HCL BigFix Service Management is affected by multiple security vulnerabilities.

Description

HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive information in error messages when invalid inputs are sent to certain API endpoints . This information could enable an attacker to facilitate further attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software HCL BigFix Service Management

Default version status: unaffected

  • Version 27affected

References