Hcltech Bigfix Insights For Vulnerability Remediation vulnerabilities

5 CVEs affecting Hcltech Bigfix Insights For Vulnerability Remediation, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-31964, published 2026-01-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-44758, published 2023-10-11. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. BigFix Insights/IVR fixlet uses improper credential handling within certain fixlet content. An attacker can gain access to information that is not explicitly authorized.
CVE-2022-44757, published 2023-10-11. High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days. BigFix Insights for Vulnerability Remediation (IVR) uses weak cryptography that can lead to credential exposure. An attacker could gain access to sensitive information, modify data in unexpected…
CVE-2025-31964, published 2026-01-07. Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days. Improper service binding configuration in internal service components in HCL BigFix IVR version 4.2 allows a privileged attacker to impact service availability via exposure of administrative services…
CVE-2025-31962, published 2026-01-07. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Insufficient session expiration in the Web UI authentication component in HCL BigFix IVR version 4.2 allows an authenticated attacker to gain prolonged unauthorized access to protected API endpoints…
CVE-2025-31963, published 2026-01-07. Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days. Improper authentication and missing CSRF protection in the local setup interface component in HCL BigFix IVR version 4.2 allows a local attacker to perform unauthorized configuration changes via…