CVE-2026-56589 - HCL BigFix Service Management is affected by multiple security vulnerabilities. · CoreCVE

Back Back to CVE browser

HIGH

HCL BigFix Service Management is affected by multiple security vulnerabilities.

Published Oct 1, 2026

7.2

HIGH

CVSS 3.1

EPSS 0.20%

Description

HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data.

Affected products

Vendor HCL Software Product HCL BigFix Service Management Default
unaffected
- Version
  Version 27
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

HCL BigFix Service Management

unaffected

Version	Status	Constraints
Version 27	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015
Vendor Advisory

Link	Providers	Tags
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner HCL

Published Oct 1, 2026

Updated Oct 1, 2026

Reserved Jun 22, 2026

Link CVE-2026-56589

CISA Vulnrichment

Updated Oct 1, 2026

Status Analyzed

Modified Oct 5, 2026

Link CVE-2026-56589

Severity n/a

Public date n/a

Links CVE-2026-56589