VulnSocial

CVE-2025-15634General(hcltech / bigfix_webui_api)

LOWCVSS 4.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to view sensitive environmental information via direct URL access to the unauthorized page.

hcltech CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • bigfix_webui_api
  • bigfix_webui_application_administration
  • bigfix_webui_cmep
  • bigfix_webui_common

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-05-09); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
hcltech
Products
bigfix_webui_apibigfix_webui_application_administrationbigfix_webui_cmepbigfix_webui_commonbigfix_webui_content_appbigfix_webui_custombigfix_webui_data_syncbigfix_webui_extensionsbigfix_webui_frameworkbigfix_webui_insights

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-05-09: 2Mentions · 2026-05-11: 1Technical Details · 2026-05-09: 205-0905-11
Signal classification2 categories
General
266.7%
Disclosure
133.3%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-05-092
Disclosure1General1
2026-05-111
General1
Full discourse3 posts
  • CVEarity@CVEarity
    General

    ⚡ New CVE Alert: CVE-2025-15634 📊 Severity: 5.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-15634 #CVE-2025-15634 #CVE #Medium #CyberSecurity #InfoSec https://t.co/j1mM93diTq

    Post summary

    The tweet provides a basic alert for CVE-2025-15634, citing its severity, risk level, and affected products, with a link to the NVD record, but contains no deeper technical, exploit, or mitigation details.

    00000613
    157 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2025-15634 A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to view sensitive environmental information via dire… https://www.cve.org/CVERecord?id=CVE-2025-15634

    Post summary

    The statement briefly announces CVE-2025-15634 as a missing authorization flaw in HCL BigFix WebUI, enabling unauthorized access to sensitive data; no PoC, exploit, patch, or active exploitation details are provided.

    00000895
    57.5K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2025-15634 Missing Authorization in HCL BigFix WebUI Allows Sensitive Information D... https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-15634 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3

    Post summary

    The post shares a link to CVE-2025-15634, noting a missing authorization flaw in HCL BigFix WebUI that could expose sensitive information, but provides no exploit, PoC, or mitigation details.

    00000966
    4.0K followersView on X
CPE platform detail21 entries

21 of 21 entries

PartVendorProductVersionTarget SWTarget HW
Apphcltechbigfix_webui_api---
Apphcltechbigfix_webui_application_administration---
Apphcltechbigfix_webui_cmep---
Apphcltechbigfix_webui_common---
Apphcltechbigfix_webui_content_app---
Apphcltechbigfix_webui_custom---
Apphcltechbigfix_webui_data_sync---
Apphcltechbigfix_webui_extensions---
Apphcltechbigfix_webui_framework---
Apphcltechbigfix_webui_insights---
Apphcltechbigfix_webui_ivr---
Apphcltechbigfix_webui_mdm---
Apphcltechbigfix_webui_patch---
Apphcltechbigfix_webui_patch_policies---
Apphcltechbigfix_webui_permissions_and_preferences---
Apphcltechbigfix_webui_profile_management---
Apphcltechbigfix_webui_query---
Apphcltechbigfix_webui_reports---
Apphcltechbigfix_webui_scm---
Apphcltechbigfix_webui_software_distribution---
Apphcltechbigfix_webui_take_action---

Explore more

Back to dashboardhcltech CVEsbigfix_webui_api vulnerabilities