CVE-2021-27756

7.5 highEPSS 0.6%

High (7.5) in hcltech bigfix compliance. EPSS 0.6% chance of exploitation in the next 30 days.

"TLS-RSA cipher suites are not disabled in BigFix Compliance up to v2.0.5. If TLS 2.0 and secure ciphers are not enabled then an attacker can passively record traffic and later decrypt it."

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-327
Published: 2022-03-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hcltech:bigfix_compliance

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0096977
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0096977

Check your stack JSON