EUVD-2026-82778
GHSA-4929-xpw2-7hx7
Severity by source
AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
Description states unauthenticated upload-and-execute yielding complete server compromise, so PR:N/AC:L and C:H/I:H/A:H; vendor's PR:L/UI:R/AC:H/A:N appears deflated and conflicts with the prose.
Primary rating from Vendor (HCL).
CVSS VectorVendor: HCL
Lifecycle Timeline
2DescriptionCVE.org
HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise.
AnalysisAI
Unrestricted file upload in HCL BigFix Service Management lets an attacker submit a crafted file through the product's upload functionality and, if the payload is subsequently triggered, achieve code execution and full server compromise. The public description characterizes the actor as unauthenticated, while the vendor-supplied CVSS vector (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N) requires a low-privileged authenticated account plus user interaction at high attack complexity; our own independent assessment scores it AV:N/AC:L/PR:N/UI:N with high confidentiality, integrity, and availability impact, so the two views differ by both privilege requirement and severity and must be reconciled before prioritization. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires reaching the BigFix Service Management file-upload functionality and submitting a file that evades the product's improper file-validation controls, then triggering/requesting the uploaded payload to execute it. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Signals conflict sharply and must be reconciled before prioritizing. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch or fixed version is identified in the available data, so remediation must begin by consulting HCL's advisory at https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133917 to confirm the patched build and the authoritative affected version range, and by confirming with HCL whether exploitation truly requires only an unauthenticated remote actor (as the advisory text states) or a low-privileged authenticated account with user interaction (as the vendor CVSS vector indicates) - the answer changes urgency dramatically. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
A Boolean-based SQL injection vulnerability exists in HCL Unica that allows remote attackers to manipulate backend datab
SQL injection and cross-tenant data exposure flaws in HCL BigFix Service Management allow an attacker who can reach the
Command injection in HCL BigFix RunBookAI 11.2 allows authenticated remote attackers to execute arbitrary operating syst
HCL BigFix Service Management (SX) is affected by a Broken Access Control vulnerability leading to privilege escalation.
SQL injection in HCL Aftermarket DPC version 1.0.0 enables unauthenticated remote attackers to extract sensitive databas
Content Security Policy weakness in HCL Hive Telco Observability's Keycloak authentication component allows remote attac
Broken access control in HCL BigFix Service Management lets a low-privileged authenticated user reach administrative scr
Missing functional level access control in HCL Aftermarket DPC version 1.0.0 enables privilege escalation attacks that c
Cross-site scripting in HCL BigFix Service Management lets an attacker who already holds a valid low-privilege account (
Hardcoded credentials in HCL Aftermarket DPC version 1.0.0 enable authenticated low-privilege attackers with user intera
Inadequate account lockout controls in HCL BigFix Service Management allow unauthenticated remote attackers to conduct s
HCL Aftermarket DPC version 1.0.0 is vulnerable to unauthenticated file discovery that allows remote attackers to read s
Same technique File Upload
View allShare
External POC / Exploit Code
Leaving vuln.today