CVE-2026-67079

HCL BigFix AEX is affected by multiple security vulnerabilities.

At a glance

Severity
MEDIUM 6.4
State
PUBLISHED
Published
Updated
Assigner
HCL

Description

HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and trick users into performing unintended actions, potentially leading to unauthorized transactions or changes to their accounts.

Scores

VersionScoreVectorScored by
CVSS 3.1MEDIUM 6.4CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:LHCL

Weaknesses (CWE)

European references

Affected products

ProductVersions
HCL Software · BigFix AEXaffected v13.0.0.1

References

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
ENISA EUVDENISA — reproduction authorised, source acknowledged