CVE-2026-67077: fallo de gravedad media en HCL Software BigFix AEX
HCL BigFix AEX is affected by multiple security vulnerabilities.
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 4.2epss 0.1%
HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the application to send unauthorized requests to external resources. Successful exploitation could lead to access to unintended services, sensitive information disclosure, or unauthorized actions through the affected application.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Productos afectados
HCL Software · BigFix AEXCVEs relacionadas — HCL Software BigFix AEX
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-67074CRITICALHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.5%CVE-2026-67080MEDIUMHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2026-21830LOWHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2026-67073HIGHHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2026-67079MEDIUMHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.2%