CVE-2026-56619

HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS) PUBLISHED

Description (CNA)

HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS) due to insufficient validation and output encoding of user-controlled input.

Affected (CNA)

Vendor / product	Versions
HCLSoftware / HCL BigFix Mobile	affected <=3.6

CWE

CWE-79

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132661

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.