CVE-2021-27759

6.5 mediumEPSS 0.3%

Medium (6.5) in hcltech bigfix inventory. EPSS 0.3% chance of exploitation in the next 30 days.

This vulnerability arises because the application allows the user to perform some sensitive action without verifying that the request was sent intentionally. An attacker can cause a victim's browser to emit an HTTP request to an arbitrary URL in the application.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
CWEs: CWE-345, CWE-352
Published: 2022-05-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hcltech:bigfix_inventory

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0098006
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0098006

Check your stack JSON