HCL BigFix AEX is affected by multiple security vulnerabilities.

{
  "id": "9de322729bc69bceaa7626ce5670c940663535b20be4421c4acc68adb818f286",
  "url": "https://www.cve.org/CVERecord?id=CVE-2026-67080",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "HCL BigFix AEX is affected by multiple security vulnerabilities.",
    "summary": "HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensitive technical information, including stack traces, system details, or internal paths, potentially facilitating further attacks.",
    "evidence": "cve:CVE-2026-67080",
    "products": [
      {
        "name": {
          "value": "BigFix AEX",
          "evidence": "/containers/cna/affected/0/product"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": []
      }
    ],
    "severity": "medium",
    "structured": {
      "id": "CVE-2026-67080",
      "aliases": [
        "CVE-2026-67080"
      ],
      "metrics": [
        {
          "format": "CVSS",
          "cvssV3_1": {
            "scope": "UNCHANGED",
            "version": "3.1",
            "baseScore": 6.5,
            "attackVector": "NETWORK",
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "integrityImpact": "NONE",
            "userInteraction": "NONE",
            "attackComplexity": "LOW",
            "availabilityImpact": "NONE",
            "privilegesRequired": "LOW",
            "confidentialityImpact": "HIGH"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "affected": [
        {
          "vendor": "HCL Software",
          "product": "BigFix AEX",
          "versions": [
            {
              "status": "affected",
              "version": "v13.0.0.1"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ],
      "modified": "2026-10-28T12:25:19.455Z",
      "provider": "cve",
      "references": [
        "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134281"
      ],
      "provider_metadata": {
        "cna": {
          "orgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc",
          "shortName": "HCL",
          "dateUpdated": "2026-10-28T12:25:19.455Z"
        }
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-67080",
        "evidence": "/cveMetadata/cveId"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/containers/cna/metrics"
  },
  "source_id": "core-cve",
  "document_id": 438194,
  "published_at": "2026-10-28T12:25:19.455+00:00"
}