Security Advisory

CVE-2025-15634

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-09 05:05:33

Last updated 2026-05-11 15:20:56

Assigner HCL

CVSS score 5.3

State PUBLISHED

Description

A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to view sensitive environmental information via direct URL access to the unauthorized page.

← Browse all CVEs View on cve.org ↗