Zurück zur CVE-Übersicht
CVE-2026-56599
LOW(2.2)CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
Risk Signal Score6/100 — NIEDRIG
Erwähnungen (letzte 60 Tage)
Artikel
EPSS-Score
0.1%
Exploit-Wahrscheinlichkeit (30 Tage)
CVSS Score
2.2
Technische Schwere
Beschreibung
HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to exploit missing security attributes such as SameSite, HttpOnly, Secure, and restrictive Paths, enabling Cross-Site Request Forgery (CSRF), session hijacking via Cross-Site Scripting (XSS), and unauthorized access.
Betroffene Produkte
- cpe:2.3:a:hcltech:bigfix_service_management:27:-:*:*:*:*:*:*