← All reports

HCL BigFix Service Management is vulnerable to a Stored Cross-Site Scripting (XSS) attack that could allow an attacker to inject and store malicious scripts within the application.

CybersecurityTechnologyConflictInformation SecurityOct 1, 2026score 0.172 posts · 0 replies across 1 instances
This thread discusses two vulnerabilities in HCL BigFix Service Management, a software product by HCL Software. The first is a Stored Cross-Site Scripting (XSS) vulnerability with a moderate severity score, and the second is an Information Disclosure vulnerability that could expose sensitive data. Both vulnerabilities were updated on 2026-10-01 and are relevant to cybersecurity and information security.

Claims

HCL BigFix Service Management is vulnerable to a Stored Cross-Site Scripting (XSS) attack that could allow an attacker to inject and store malicious scripts within the application.
Parent: CybersecurityEntity: HCL BigFix Service ManagementImpact: negativeDate: Oct 1, 2026Target: HCL BigFix Service Management's security
HCL BigFix Service Management has an Information Disclosure vulnerability that exposes sensitive data through exposed API endpoints, potentially enabling further attacks.
Parent: CybersecurityEntity: HCL BigFix Service ManagementImpact: negativeDate: Oct 1, 2026Target: HCL BigFix Service Management's security

Source posts

@[email protected]
🚨 EUVD-2026-90874 📊 Score: 7.2/10 (CVSS v3.1) 📦 Product: HCL BigFix Service Management 🏢 Vendor: HCL Software 📅 Updated: 2026-10-01 📝 HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affecte... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90874 #cybersecurity #infosec #euvd #cve #vulnerability
0 boosts · 0 favs · 0 replies · Oct 1, 2026
#cybersecurity#infosec#euvd#cve#vulnerability
@[email protected]
🚨 EUVD-2026-90879 📊 Score: 5.3/10 (CVSS v3.1) 📦 Product: HCL BigFix Service Management 🏢 Vendor: HCL Software 📅 Updated: 2026-10-01 📝 HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data. This information could enable an attacker to launch further, more serious attacks. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90879 #cybersecurity #infosec #euvd #cve #vulnerability
0 boosts · 0 favs · 0 replies · Oct 1, 2026
#cybersecurity#infosec#euvd#cve#vulnerability