PT-2026-128227
CVE-2026-67079
·
Published
2026-10-28
·
Updated
2026-10-28
Description by
CVSS 3.1
6.4
MediumMetricsAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L
HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and trick users into performing unintended actions, potentially leading to unauthorized transactions or changes to their accounts.
Found an issue in the description? Have something to add? Feel free to write us 👾