CVE-2026-21840CWE-208

HCL BigFix Platform is affected by a user enumeration vulnerability

Low · published July 14, 2026

CVSS v3.1
3.1
EPSS
0%
Percentile
14.3
In the wild
Unconfirmed
What it is

HCL BigFix Platform is affected by a user enumeration vulnerability which might allow an attacker, through careful system control and response time monitoring, to perform some level of user enumeration for the BigFix service.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00240 · 14.3th percentile
Weakness
CWE-208 · Observable Timing Discrepancy
Published
2026-07-14T21:36Z
EPSS history
Timeline
  • 14 JUL 21:36Z
    HCL BigFix Platform is affected by a user enumeration vulnerability
    cvelistv5