CVE-2026-67103: fallo de gravedad alta en HCL BigFix Service Management
HCL BigFix Service Management is affected by multiple security vulnerabilities.
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.6epss 0.2%
HCL BigFix Service Management is affected by Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject unsanitized malicious scripts that execute in a victim's browser, enabling session hijacking, account takeover, and unauthorized actions on behalf of affected users.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N
Productos afectados
HCL Software · HCL BigFix Service ManagementCVEs relacionadas — HCL BigFix Service Management
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-67100CRITICALHCL BigFix Service Management is affected by multiple security vulnerabilities.EPSS 0.5%CVE-2026-67102HIGHHCL BigFix Service Management is affected by multiple security vulnerabilities.EPSS 0.4%CVE-2026-56592MEDIUMHCL BigFix Service Management is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2026-21848MEDIUMHCL BigFix Service Management is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2026-67101CRITICALHCL BigFix Service Management is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2026-67171MEDIUMHCL BigFix Service Management is affected by multiple security vulnerabilities.EPSS 0.2%