CVE-2026-67080
HCL BigFix AEX is affected by multiple security vulnerabilities.
MEDIUM 6.5
En bref
- Source
- CVE.org
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- HCL
Description
HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensitive technical information, including stack traces, system details, or internal paths, potentially facilitating further attacks.
Faiblesses (CWE)
- CWE-209 — Message d'erreur contenant des informations sensibles
- CWE-391 — DEPRECATED: Unchecked Error Condition
- CWE-755 — Gestion incorrecte des conditions exceptionnelles
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | HCL |
Références européennes
- ENISA EUVD · EUVD-2026-112031
- GCVE · GCVE-0-2026-67080
Produits affectés
| Produit | Versions |
|---|---|
| HCL Software · BigFix AEX | affected v13.0.0.1 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |