CVE-2026-67077
HCL BigFix AEX is affected by multiple security vulnerabilities.
HCL Software BigFix AEXApplications & CMS
CVSS
4.2MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version yet
What fixes it
No source in this snapshot names a fixed version.
Description
HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the application to send unauthorized requests to external resources. Successful exploitation could lead to access to unintended services, sensitive information disclosure, or unauthorized actions through the affected application.
Text from CVE List
Affected versions 1
- BigFix AEXaffected: v13.0.0.1CVE List