Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

BigFix Platform — Vulnerabilities & Security Advisories 49

All 49 CVE vulnerabilities found in BigFix Platform, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known vulnerabilities affecting the BigFix Platform, a configuration management and security product developed by HCL, classified under the specific weakness type "CWE-119: Buffer Overflow". It collects security flaws reported for this product across its various versions, covering the historical period during which these issues were identified and published. Visitors can use this aggregation to track the vendor’s advisory history, understand the technical characteristics of the buffer overflow weakness class, and review the complete vulnerability timeline for the BigFix Platform. The entries are organized to facilitate cross-referencing between specific bug reports, the relevant Common Vulnerabilities and Exposures identifiers, and the associated Common Weakness Enumeration categories, providing a structured view of the product's security posture.

Vendor: IBM Corporation

CVE ID Title CVSS Severity Published
CVE-2026-21767 HCL BigFix Platform is affected by insufficient authentication CWE-306 4.0 Medium 2026-04-01
CVE-2026-21765 HCL BigFix Platform is affected by insecure permissions on private cryptographic keys CWE-732 8.8 High 2026-04-01
CVE-2024-30117 HCL BigFix Platform is affected by a DLL Hijack vulnerability CWE-427 2.5 Low 2024-10-14
CVE-2024-23556 HCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiation 5.9 Medium 2024-05-17
CVE-2024-23554 HCL BigFix Platform is susceptible to Cross-Site Request Forgery CWE-352 5.7 Medium 2024-05-17
CVE-2024-23583 HCL BigFix Platform is susceptible to insufficiently protected credentials CWE-522 6.7 Medium 2024-05-17
CVE-2023-45715 HCL BigFix Platform is susceptible to a Denial of Service attack 3.5 Low 2024-03-28
CVE-2023-45706 HCL BigFix Platform is susceptible to Cross Site Scripting (XSS) and/or Man in the Middle (MITM) attack 2.0 Low 2024-03-28
CVE-2023-45705 HCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF) 3.5 Low 2024-03-28
CVE-2023-37528 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform 6.5 Medium 2024-02-03
CVE-2024-23553 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform 3.0 Low 2024-02-02
CVE-2023-37531 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform 3.3 Low 2024-02-02
CVE-2023-37530 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform 3.0 Low 2024-02-02
CVE-2023-37529 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform 3.0 Low 2024-02-02
CVE-2023-37527 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform 5.4 Medium 2024-02-02
CVE-2023-37536 HCL BigFix Platform is vulnerable to an integer overflow in xerces-c++ 3.2.3 8.2 High 2023-10-11
CVE-2022-42453 HCL BigFix Platform is affected by insufficient warnings 6.9 Medium 2022-12-17
CVE-2022-38659 HCL BigFix Platform is affected by insecure credential storage 6.0 Medium 2022-12-17
CVE-2021-27767 HCL BigFix Platform Console is affected by a Privilege Escalation Vulnerability CWE-269 6.7 Medium 2022-05-06
CVE-2021-27766 HCL BigFix Platform Client is affected by a Privilege Escalation Vulnerability CWE-269 6.7 Medium 2022-05-06
CVE-2021-27765 HCL BigFix Platform Server API is affected by Privilege Escalation Vulnerability CWE-269 6.7 Medium 2022-05-06
CVE-2021-27762 HCL BigFix Platform is affected by misconfigured security-related HTTP headers 4.7 Medium 2022-05-06
CVE-2021-27761 HCL BigFix Platform is affected by weak web transport security 4.8 Medium 2022-05-06
CVE-2019-4058 IBM BigFix Platform 安全特征问题漏洞 6.5 - 2019-05-20
CVE-2019-4011 IBM BigFix Platform 跨站脚本漏洞 5.4 - 2019-05-20
CVE-2018-2005 IBM BigFix Platform 信息泄露漏洞 2.3 - 2019-05-20
CVE-2019-4013 IBM BigFix Platform 代码问题漏洞 8.8 - 2019-04-10
CVE-2019-4061 IBM BigFix Platform 信息泄露漏洞 5.3 - 2019-02-27
CVE-2018-1476 IBM BigFix Platform 安全漏洞 5.3 - 2018-12-12
CVE-2018-1474 IBM BigFix Platform 注入漏洞 4.7 - 2018-12-12

All 49 known CVE vulnerabilities affecting BigFix Platform with full Chinese analysis, references, and POCs where available.