Vulnerability Details CVE-2026-67172
HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive information in error messages when invalid inputs are sent to certain API endpoints . This information could enable an attacker to facilitate further attacks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 9.9%
CVSS Severity
CVSS v3 Score 3.7
Products affected by CVE-2026-67172
-
cpe:2.3:a:hcltech:bigfix_service_management:27