HCL BigFix Compliance
0 remedies
cpe:2.3:a:hcltech:bigfix_compliance:*:*:*:*:*:*:*, +1 more
0 remedies
HCL BigFix Compliance Cross-Site Request Forgery Vulnerability Due to Improper SameSite Attribute
Vulnerability
A Cross-Site Request Forgery (CSRF) vulnerability exists in HCL BigFix Compliance due to an improper or missing SameSite attribute. This flaw allows a malicious site to potentially manipulate a user's browser into making unintended requests while using authenticated sessions.
Impact
Exploitation of this vulnerability could lead to Cross-Site Request Forgery attacks, allowing malicious sites to perform actions on behalf of users without their consent.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
5.7impact
0.8exploitability
6.0remediation
0.0relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.