CVE-2021-27761

Description

References

• support.hcltechsw.com/csm · Vendor Advisory

More vulnerabilities in bigfix platform

• CVE-2026-21767LOW 3.3HCL BigFix Platform is affected by insufficient authentication.  The application might allow users to access sensitive areas of the applicat…
• CVE-2026-21765HIGH 7.8HCL BigFix Platform is affected by insecure permissions on private cryptographic keys.  The private cryptographic keys located on a Windows …
• CVE-2024-42193HIGH 8.1HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario…
• CVE-2024-42200MEDIUM 5.4HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially weak validation of user input.
• CVE-2024-42189MEDIUM 6.5HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack, due to a potentially weak validation of an API parameter.