This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-67077 | BDVDB-2026-396839 Detail

HCL SoftwareBigFix AEX

Description#

HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the application to send unauthorized requests to external resources. Successful exploitation could lead to access to unintended services, sensitive information disclosure, or unauthorized actions through the affected application.

Impact#

Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-918 Server-Side Request Forgery (SSRF)
  • CWE-441 Unintended Proxy or Intermediary ('Confused Deputy')
  • CWE-610 Externally Controlled Reference to a Resource in Another Sphere

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.