synced 6 MIN AGO
01 Record

CVE-2026-67073

HCL BigFix AEX is affected by multiple security vulnerabilities.

HighPUBLISHEDCNA: HCL
CNA base score8.6 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
View raw JSON

02 Description

HCL BigFix AEX is affected by multiple security vulnerabilities.

03 Exploitation and scoring

Exploitation
Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision
Not assessed by CISA
EPSS probability
Not scored by EPSS
EPSS percentile
Not scored by EPSS
NVD base score
8.6 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
NVD analysis status
Deferred. NVD last modified this record on 2026-10-28.
Red Hat severity
No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published
2026-10-28 12:24Z22 HR AGO
Last updated
2026-10-28 12:24Z22 HR AGO
Reserved
2026-07-28
Assigning CNA
HCL
Record state
PUBLISHED
Severity
High (CVSS 8.6)
CNA CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Weaknesses
  • CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Base
  • CWE-284Improper Access ControlPillar
  • CWE-434Unrestricted Upload of File with Dangerous TypeBase
  • CWE-552Files or Directories Accessible to External PartiesBase
Data version
5.2
Document digest
65f4b9bb357c3333cd828c6c2893152b9d8c981d540cc3bec442a5271b35fa3e

05 Affected products

VendorProductVersionsPlatforms
HCL SoftwareBigFix AEXv13.0.0.1—

06 References