Vulnerability Details CVE-2026-56595
HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker to craft a malicious web page that interacts with the vulnerable application, enabling unauthorized access to protected resources and restricted APIs on behalf of a victim.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 13.7%
CVSS Severity
CVSS v3 Score 3.1
Products affected by CVE-2026-56595
-
cpe:2.3:a:hcltech:bigfix_service_management:23
-
cpe:2.3:a:hcltech:bigfix_service_management:27