CVE-2025-0276

概要

参考情報

• support.hcl-software.com/csm · Vendor Advisory

bigfix mobile のその他の脆弱性

• CVE-2025-0277中 6.1HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could…
• CVE-2025-0275中 4.3HCL BigFix Mobile 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions,…
• CVE-2025-0274中 4.3HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control. Unauthorized users can access a small sub…
• CVE-2023-28014中 5.4HCL BigFix Mobile is vulnerable to a cross-site scripting attack. An authenticated attacker could inject malicious scripts into the applicat…
• CVE-2023-28012高 8.8HCL BigFix Mobile is vulnerable to a command injection attack. An authenticated attacker could run arbitrary shell commands on the WebUI ser…