HCL BigFix AEX suffers from an Unrestricted File Upload and Improper Access Control vulnerability. This flaw allows attackers to upload malicious or unauthorized files and subsequently access or download sensitive uploaded content. Exploitation could lead to information disclosure, unauthorized access, or system compromise. The vulnerability has a high severity with a CVSS score of 8.6. No specific affected versions or patches are currently documented.