Vulnerabilities > Hcltech > Bigfix Webui > High

DATE CVE VULNERABILITY TITLE RISK
2023-07-18 CVE-2023-28021 Inadequate Encryption Strength vulnerability in Hcltech Bigfix Webui
The BigFix WebUI uses weak cipher suites.
network
low complexity
hcltech CWE-326
7.5
7.5
2023-07-18 CVE-2023-28019 SQL Injection vulnerability in Hcltech Bigfix Webui
Insufficient validation in Bigfix WebUI API App site version < 14 allows an authenticated WebUI user to issue SQL queries via an unparameterized SQL query.
network
low complexity
hcltech CWE-89
8.8
8.8