CVE-2026-67077
CVE-2026-67077 · HCL BigFix AEX is affected by multiple security vulnerabilities.
This page contains facts from public vulnerability sources. Check the original advisory before updating.
HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the application to send unauthorized requests to external resources. Successful exploitation could lead to access to unintended services, sensitive information disclosure, or unauthorized actions through the affected application.
CVSS 4.2 · Medium · EPSS 0.1%
- Published
- Updated
Affected products and versions
bigfix aex
- Versions
- v13.0.0.1: Affected
No fix published