← Back to CVE search

CVE-2025-15634

HCL BigFix WebUI

Description

A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to view sensitive environmental information via direct URL access to the unauthorized page.

CVSS 4.3EPSS 0.18%Risk 0.44
View source
Published
2026-05-09 06:16:09
Affected versions
unknown
Type
Core software
Last modified
2026-07-25 11:10:00
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N