CVE-2021-27758: Hcltech Bigfix Inventory

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

There is a security vulnerability in login form related to Cross-site Request Forgery which prevents user to login after attacker spam to login and system blocked victim's account.

Affected products

• Hcltech Bigfix Inventory: from 9.0, before 10.0.7.0 (fixed in 10.0.7.0)

Published 2022-05-06. Last modified 2026-06-17.