Bigfix Mobile

bigfix_mobile

Vendor: Hcltech • 10 CVEs

CVEs (10)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-0277 1Hcltech 2Bigfix Mobile Bigfix Modern Client Management Jun 17, 2026 Oct 16, 2025 N/A· v4 6.1 MEDIUM· v3 N/A· v2 HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by not properly restricting the sources of...Show more HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content.Show less
CVE-2025-0276 1Hcltech 2Bigfix Mobile Bigfix Modern Client Management Jun 17, 2026 Oct 16, 2025 N/A· v4 6.1 MEDIUM· v3 N/A· v2 HCL BigFix Modern Client Management (MCM) 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by not properly res...Show more HCL BigFix Modern Client Management (MCM) 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content.Show less
CVE-2025-0275 1Hcltech 2Bigfix Mobile Bigfix Modern Client Management Jun 17, 2026 Oct 16, 2025 N/A· v4 4.3 MEDIUM· v3 N/A· v2 HCL BigFix Mobile 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions.
CVE-2025-0274 1Hcltech 2Bigfix Mobile Bigfix Modern Client Management Jun 17, 2026 Oct 16, 2025 N/A· v4 4.3 MEDIUM· v3 N/A· v2 HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal function...Show more HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions.Show less
CVE-2023-28014 1Hcltech 1Bigfix Mobile Jun 17, 2026 Jul 27, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 HCL BigFix Mobile is vulnerable to a cross-site scripting attack. An authenticated attacker could inject malicious scripts into the application.
CVE-2023-28012 1Hcltech 1Bigfix Mobile Jun 17, 2026 Jul 27, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 HCL BigFix Mobile is vulnerable to a command injection attack. An authenticated attacker could run arbitrary shell commands on the WebUI server.
CVE-2021-27782 1Hcltech 1Bigfix Mobile Jun 17, 2026 Jan 20, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 HCL BigFix Mobile / Modern Client Management Admin and Config UI passwords can be brute-forced. User should be locked out for multiple invalid attempts.
CVE-2021-27781 1Hcltech 2Bigfix Mobile Modern Client Management Jun 17, 2026 May 27, 2022 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 The Master operator may be able to embed script tag in HTML with alert pop-up display cookie.
CVE-2021-27780 1Hcltech 2Bigfix Mobile Modern Client Management Jun 17, 2026 May 27, 2022 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 The software may be vulnerable to both Un-Auth XML interaction and unauthenticated device enrollment.
CVE-2021-27783 1Hcltech 2Bigfix Mobile Bigfix Modern Client Management Jun 17, 2026 May 25, 2022 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed.