CVE-2022-42453: Hcltech Bigfix Platform

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

There are insufficient warnings when a Fixlet is imported by a user. The warning message currently assumes the owner of the script is the logged in user, with insufficient warnings when attempting to run the script.

Affected products

• Hcltech Bigfix Platform: from 9.5.0, before 9.5.21 (fixed in 9.5.21); from 10.0.0, before 10.0.8 (fixed in 10.0.8)

Published 2022-12-19. Last modified 2026-06-17.