← Back

Bigfix Webui Ivr

bigfix_webui_ivr

Vendor: Hcltech • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-15634
1Hcltech
21Bigfix Webui Api
Bigfix Webui Application AdministrationBigfix Webui Cmep+18 more
Jun 17, 2026
May 9, 2026
5.3 MEDIUM· v4
4.3 MEDIUM· v3
N/A· v2
A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to view sensitive environmental information via direct URL access to the unauthorized page.
CVE-2025-15633
1Hcltech
21Bigfix Webui Api
Bigfix Webui Application AdministrationBigfix Webui Cmep+18 more
Jun 17, 2026
May 9, 2026
5.3 MEDIUM· v4
6.5 MEDIUM· v3
N/A· v2
An improper authorization vulnerability in HCL BigFix WebUI allows an authenticated user without Master Operator privileges to access internal data (site names, versions, and configuration variables) and bypass privilege...Show more
An improper authorization vulnerability in HCL BigFix WebUI allows an authenticated user without Master Operator privileges to access internal data (site names, versions, and configuration variables) and bypass privilege requirements via unprotected endpoints lacking adequate security headers.Show less