CVE-2026-67079
HCL BigFix AEX is affected by multiple security vulnerabilities.
HCL Software BigFix AEXApplications & CMS
CVSS
6.4MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version yet
What fixes it
No source in this snapshot names a fixed version.
Description
HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and trick users into performing unintended actions, potentially leading to unauthorized transactions or changes to their accounts.
Text from CVE List
Affected versions 1
- BigFix AEXaffected: v13.0.0.1CVE List