Clickjacking Vulnerability in HCL BigFix AEX
CVE-2026-67079

6.4MEDIUM

Key Information:

Vendor
CVE Published:
28 October 2026

What is CVE-2026-67079?

HCL BigFix AEX is susceptible to a Clickjacking vulnerability. This flaw enables attackers to embed the application within malicious web pages or iframes, deceiving users into unknowingly executing unintended actions. As a result, users may inadvertently authorize transactions or modify their account settings, leaving them vulnerable to various security threats. It is crucial for users and administrators to be aware of this risk and implement necessary protective measures.

Affected Version(s)

BigFix AEX v13.0.0.1

References

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.