Threat database

HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker to craft a malicious web page that interacts with the vulnerable application, enabling unauthorized access to protected resources and restricted APIs on behalf of a victim.

HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from the application's responses, enabling them to map the underlying network topology and identify potential internal targets.

HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthenticated attacker to execute sustained brute-force attacks against the login interface, resulting in unauthorized system access.

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise.

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries.

HCL BigFix Service Management is affected by Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject unsanitized malicious scripts that execute in a victim's browser, enabling session hijacking, account takeover, and unauthorized actions on behalf of affected users.

HCL BigFix Service Management is affected by a high-severity Broken Access Control vulnerability, which could allow a low-privileged user to gain unauthorized access to administrative screens and functions reserved for higher-privileged roles.

HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities. which could allow an authenticated attacker to inject database commands to extract sensitive system details, as well as manipulate request values to gain unauthorized access to full personal profile data and PII across different organizations.

HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability in its search functionality, which could allow an attacker to force the application server to send requests to internal systems that are not accessible from the internet.

CVE-2025-52657 is a low-severity vulnerability in HCL Software MyXalytics involving allocation of resources without limits or throttling. It allows users to input data without restrictions on the number of characters, potentially impacting system performance or availability. There is no evidence of confidentiality or integrity impact. No patch or remediation information is currently available.

CVE-2025-52652 is a content spoofing vulnerability in HCL Software MyXalytics that allows an attacker with limited privileges to manipulate displayed content, making it appear as if it originates from a trusted source. This misrepresentation could potentially facilitate phishing or data theft. The vulnerability has a low CVSS score of 3.5, indicating limited impact. No affected versions or patch information are provided.

CVE-2025-52651 is an improper input validation vulnerability in HCL Software MyXalytics. This flaw allows malicious or unexpected input to cause unintended system behavior or security issues. The vulnerability has a low severity rating with a CVSS score of 3.5. No affected versions or patches are explicitly stated in the available data.

HCL IntelliOps Event Management (IEM) has a concurrency vulnerability where admin user sessions may remain active after logout or session deletion. This issue could allow sessions to persist longer than intended, potentially leading to unauthorized session reuse. The vulnerability is rated as low severity with a CVSS score of 3.1. No affected versions or patches have been specified yet.

HCL IntelliOps Event Management (IEM) has a session deletion vulnerability (CVE-2025-62342) where user sessions may not be fully terminated after logout or deletion. This insufficient session expiration could allow sessions to remain active longer than intended. The vulnerability has a CVSS score of 6.4, indicating medium severity. No patch or official remediation guidance is currently available. There are no known exploits in the wild, and affected versions have not been specified.

HCL Software Hive version 1.0 contains a vulnerability where sensitive cookies are set without the 'HttpOnly' flag. This issue is part of multiple infrastructure and network configuration vulnerabilities that could allow unauthorized lateral movement, container breakout, and exposure of sensitive data within internal communications. The vulnerability has a CVSS score of 5.4, indicating a medium severity level.

CVE-2026-21753 identifies a medium severity vulnerability in HCL Software Hive version 1.0 related to weak software supply chain governance. This weakness may allow the inclusion of vulnerable, unmaintained, or malicious third-party components within the application environment, potentially impacting confidentiality and integrity. The vulnerability has a CVSS 3.1 base score of 4.2, indicating a network attack vector with high attack complexity and requiring user interaction. No known exploits or patches are currently documented.

HCL Software Hive version 1.0 contains an information disclosure vulnerability (CVE-2026-21758) that could allow an attacker to obtain sensitive information about the host environment. The vulnerability has a low severity rating with a CVSS score of 3.7 and does not involve privilege or user interaction. No known exploits are reported in the wild, and no patch or remediation details are currently provided.

HCL IntelliOps Event Management (IEM) version 1.4.0 has a vulnerability due to missing or insecure Cross-Origin Security headers. This weakness can lead to unauthorized external interactions with the application environment and resources, potentially exposing sensitive information. The vulnerability is classified under CWE-200, indicating exposure of sensitive information to unauthorized actors. The CVSS v3.1 score is 4.8, reflecting a medium severity level. There are no known exploits in the wild and no official patches or fixes have been provided yet.

CVE-2025-62299 is a least privilege violation vulnerability in HCL IntelliOps Event Management (IEM) version 1.4.0. This flaw allows an attacker with certain privileges to access resources with elevated privileges that they should not normally have. The vulnerability has a medium severity rating with a CVSS score of 6.6.

HCL IntelliOps Event Management (IEM) version 1.4.0 contains a race condition vulnerability (CWE-362) that allows concurrent execution using a shared resource with improper synchronization. This timing window can enable an attacker to modify the resource, leading to unpredictable behavior. The vulnerability has a medium severity with a CVSS score of 5.9 and impacts the integrity of the system without affecting confidentiality or availability.