HCL BigFix AEX is affected by multiple security vulnerabilities. (HCL Software BigFix AEX)

CVE-2026-67080

MEDIUM 6.5

En bref

Source: CVE.org
EPSS: EPSS 0.34 % · centile 27 (2026-10-29)
État: PUBLISHED
Publiée: 2026-10-28 12:25 UTC
Mise à jour: 2026-10-28 12:25 UTC
Attribuée par: HCL

Description

HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensitive technical information, including stack traces, system details, or internal paths, potentially facilitating further attacks.

Faiblesses (CWE)

CWE-209 — Message d'erreur contenant des informations sensibles
CWE-391 — DEPRECATED: Unchecked Error Condition
CWE-755 — Gestion incorrecte des conditions exceptionnelles

Références

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134281

Scores

Version	Score	Vecteur	Évalué par
CVSS 3.1	MEDIUM 6.5	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	HCL

Références européennes

ENISA EUVD · EUVD-2026-112031
GCVE · GCVE-0-2026-67080

Produits affectés

Produit	Versions
HCL Software · BigFix AEX	affected v13.0.0.1

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged

🟡 HCL BigFix AEX is affected by multiple security vulnerabilities. (HCL Software BigFix AEX)