high7.2
CVE-2026-56589
HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scr…
Impact
HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Bigfix Service Management | Version 27 |