bigfix service management vulnerabilities and fixes

Recent CVEs affecting bigfix service management, with upgrade or downgrade steps. 18 tracked.

Also searched as: bigfixservicemanagement.

bigfix service management has 18 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-10-01. Highest priority: CVE-2026-67100 (score 49/100).

• CVE-2026-56590 MEDIUM 6.4 DOWNGRADE HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file va
• CVE-2026-21848 MEDIUM 5.0 DOWNGRADE HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an a
• CVE-2026-56592 MEDIUM 6.5 DOWNGRADE HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to in
• CVE-2026-56595 LOW 3.1 DOWNGRADE HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated
• CVE-2026-56597 LOW 3.1 DOWNGRADE HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow
• CVE-2026-21806 LOW 3.1 DOWNGRADE HCL BigFix Service Management is affected by an Administrative Session Concurrency vulnerability
• CVE-2025-31980 MEDIUM 4.3 DOWNGRADE HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an
• CVE-2026-67100 CRITICAL 9.8 DOWNGRADE HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerab
• CVE-2026-67101 CRITICAL 9.3 DOWNGRADE HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability in its search
• CVE-2026-67102 HIGH 8.1 DOWNGRADE HCL BigFix Service Management is affected by a high-severity Broken Access Control vulnerability, which could
• CVE-2026-67103 HIGH 7.6 DOWNGRADE HCL BigFix Service Management is affected by Cross-Site Scripting (XSS) vulnerability, which could allow an at
• CVE-2026-67172 LOW 3.7 DOWNGRADE HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns s
• CVE-2026-67171 MEDIUM 5.3 DOWNGRADE HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API en
• CVE-2026-56599 LOW 2.2 DOWNGRADE HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which c
• CVE-2026-56589 HIGH 7.2 DOWNGRADE HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could al
• CVE-2026-67106 MEDIUM 5.3 DOWNGRADE HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API e
• CVE-2026-67105 HIGH 7.4 DOWNGRADE HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an att
• CVE-2026-67104 MEDIUM 5.3 DOWNGRADE HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an una

FAQ

How do I fix bigfix service management vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is bigfix service management being exploited right now?

None of the tracked bigfix service management CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which bigfix service management CVE should I patch first?

CVE-2026-67100 currently ranks highest (49/100): HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerab.

RSS feed for bigfix service management · ← Back to latest CVEs