Hcltech Bigfix Inventory vulnerabilities

3 CVEs affecting Hcltech Bigfix Inventory, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-23540, published 2024-04-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-23540, published 2024-04-03. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. The HCL BigFix Inventory server is vulnerable to path traversal which enables an attacker to read internal application files from the Inventory server. The BigFix Inventory server does not properly…
CVE-2021-27758, published 2022-05-06. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. There is a security vulnerability in login form related to Cross-site Request Forgery which prevents user to login after attacker spam to login and system blocked victim's account.
CVE-2021-27759, published 2022-05-06. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. This vulnerability arises because the application allows the user to perform some sensitive action without verifying that the request was sent intentionally. An attacker can cause a victim's browser…