Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An improper authorization vulnerability in HCL BigFix WebUI allows an authenticated user without Master Operator privileges to access internal data (site names, versions, and configuration variables) and bypass privilege requirements via unprotected endpoints lacking adequate security headers.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-09 | 2 | Disclosure2 |
| 2026-05-11 | 1 | General1 |
⚡ New CVE Alert: CVE-2025-15633 📊 Severity: 5.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-15633 #CVE-2025-15633 #CVE #Medium #CyberSecurity #InfoSec https://t.co/AOJqPr6JDC
Post summary
A brief announcement of CVE-2025-15633 with a medium severity score of 5.3; no further technical, exploit, patch, or threat activity details are provided.
CVE-2025-15633 An improper authorization vulnerability in HCL BigFix WebUI allows an authenticated user without Master Operator privileges to access internal data (site names, versi… https://www.cve.org/CVERecord?id=CVE-2025-15633
Post summary
The message announces an improper authorization flaw in HCL BigFix WebUI that lets authenticated non-master operators read internal data; no PoC, exploit, or patch info is provided.
CVE-2025-15633 Improper Authorization in HCL BigFix WebUI Allows Privilege Bypass https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-15633
Post summary
The text announces CVE-2025-15633, describing an improper authorization flaw in HCL BigFix WebUI that permits privilege escalation, with no PoC, exploit, or patch details provided.
21 of 21 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | hcltech | bigfix_webui_api | - | - | - |
| App | hcltech | bigfix_webui_application_administration | - | - | - |
| App | hcltech | bigfix_webui_cmep | - | - | - |
| App | hcltech | bigfix_webui_common | - | - | - |
| App | hcltech | bigfix_webui_content_app | - | - | - |
| App | hcltech | bigfix_webui_custom | - | - | - |
| App | hcltech | bigfix_webui_data_sync | - | - | - |
| App | hcltech | bigfix_webui_extensions | - | - | - |
| App | hcltech | bigfix_webui_framework | - | - | - |
| App | hcltech | bigfix_webui_insights | - | - | - |
| App | hcltech | bigfix_webui_ivr | - | - | - |
| App | hcltech | bigfix_webui_mdm | - | - | - |
| App | hcltech | bigfix_webui_patch | - | - | - |
| App | hcltech | bigfix_webui_patch_policies | - | - | - |
| App | hcltech | bigfix_webui_permissions_and_preferences | - | - | - |
| App | hcltech | bigfix_webui_profile_management | - | - | - |
| App | hcltech | bigfix_webui_query | - | - | - |
| App | hcltech | bigfix_webui_reports | - | - | - |
| App | hcltech | bigfix_webui_scm | - | - | - |
| App | hcltech | bigfix_webui_software_distribution | - | - | - |
| App | hcltech | bigfix_webui_take_action | - | - | - |