Vulnerability Details CVE-2026-56597
HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from the application's responses, enabling them to map the underlying network topology and identify potential internal targets.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 15.2%
CVSS Severity
CVSS v3 Score 3.1
Products affected by CVE-2026-56597
-
cpe:2.3:a:hcltech:bigfix_service_management:23
-
cpe:2.3:a:hcltech:bigfix_service_management:27