CVE-2026-56589
HIGHCVSS 7.2Description
HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data.
Timeline
Published:October 1st, 2026 3:17 PM
Last modified:October 5th, 2026 5:25 PM
CVSS Scoring
CVSS v3: 7.2 (HIGH)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Affected Software
From NVD CPE configuration data
Vendors
hcltech
Products
bigfix_service_management
Weaknesses (CWE)
References & Reports
Advisories, patches, and third-party reports
Source: NIST NVD · Data may lag official sources by up to one minute