CVE-2020-14254

7.5 highEPSS 0.6%

High (7.5) in hcltech bigfix platform. EPSS 0.6% chance of exploitation in the next 30 days.

TLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2. If TLS 2.0 and secure ciphers are not enabled then an attacker can passively record traffic and later decrypt it.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
CWE: CWE-327
Published: 2020-12-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hcltech:bigfix_platform

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085733
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085733

Check your stack JSON