Vulnerability Details CVE-2026-56589
HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 9.0%
CVSS Severity
CVSS v3 Score 7.2