Bigfix Compliance
14 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Bigfix Compliance, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.
Bigfix Compliance CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 3 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 2 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 1 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 14 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- High1
- Medium10
- Low3
Latest CVEs
The 14 most recently published vulnerabilities affecting Bigfix Compliance.
- CVE-2023-37525HCL BigFix Compliance is vulnerable to a sensitive information disclosure5.3
- CVE-2024-42213HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment5.3
- CVE-2024-42212HCL BigFix Compliance is affected by an improper or missing SameSite attribute5.4
- CVE-2024-30142HCL BigFix Compliance is affected by a missing secure flag on a cookie3.8
- CVE-2024-30141HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information4.7
- CVE-2024-30140HCL BigFix Compliance is affected by unvalidated redirects and forwards5.4
- CVE-2024-30126HCL BigFix Compliance is affected by a missing X-Frame-Options Header vulnerability4.7
- CVE-2024-30125HCL BigFix Compliance is affected by an internal server error6.2
- CVE-2024-23551HCL BigFix Compliance is potentially affected by Oracle database credentials stored at endpoint6.5
- CVE-2021-27756"TLS-RSA cipher suites are not disabled in BigFix Compliance up to v2.0.5. If TLS 2.0 and secure ciphers are not enabled then an attacker can passively record traffic and later decrypt it."7.5
- CVE-2017-1200IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a m...3.7
- CVE-2017-1177IBM BigFix Compliance 1.7 through 1.9.91 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 123429.5.3
- CVE-2017-1202IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim...5.4
- CVE-2017-1198IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs...3.7
Product grouping is registry-driven, with AI assist and human review. How it works