HCL BigFix Mobile
Moderate fix1 remedy
cpe:2.3:a:hcltech:bigfix_mobile:*:*:*:*:*:*:*
Moderate fix1 remedy
- <= 3.3
HCL BigFix Mobile Content Security Policy Vulnerability
Vulnerability
Patched
A vulnerability exists in HCL BigFix Mobile versions through 3.3, related to insecure directives within the Content Security Policy (CSP). This flaw could allow an attacker to manipulate users into performing unintended actions by inadequately controlling the sources of scripts and other content.
Impact
Exploitation of this vulnerability could lead to unauthorized actions being performed by users, potentially allowing for further exploitation or manipulation within the application.
Remediation
Users are advised to upgrade to HCL BigFix Mobile version 3.4 or higher.
Added: Oct 16, 2025, 9:23 AM
Updated: Oct 16, 2025, 3:58 PM
Vulnerability Rating
Custom Algorithm
spread
8.1impact
1.7exploitability
6.0remediation
7.7relevance
0.7threat
0.0urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.