HCL BigFix Service Management has multiple security vulnerabilities that could allow attackers to exploit insecure cookie attributes, disclose information, and intercept unencrypted HTTP traffic.

🚨 EUVD-2026-90878 📊 Score: 2.2/10 (CVSS v3.1) 📦 Product: HCL BigFix Service Management 🏢 Vendor: HCL Software 📅 Updated: 2026-10-01 📝 HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to exploit missing security attributes such as SameSite, HttpOnly, Secure, and restrictive Paths, ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90878 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-90877 📊 Score: 5.3/10 (CVSS v3.1) 📦 Product: HCL BigFix Service Management 🏢 Vendor: HCL Software 📅 Updated: 2026-10-01 📝 HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly accessible JavaScript files, enabling the discovery of hidden administrative AP... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90877 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-90876 📊 Score: 7.4/10 (CVSS v3.1) 📦 Product: HCL BigFix Service Management 🏢 Vendor: HCL Software 📅 Updated: 2026-10-01 📝 HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extractio... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90876 #cybersecurity #infosec #euvd #cve #vulnerability