Zetlyn
GitHubGet started

HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and…

cve CVE-2026-56589 2 sources, 2 claims · Watch

NVD writes:
HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data. the claim
Severity
high GitHub advisories
HIGH NVD
CVSS
7.2 GitHub advisories
7.2 NVD
Vendor
HCL Software NVD
Product
HCL BigFix Service Management NVD
CWE
CWE-79 GitHub advisories
CWE-79 NVD

How far exploitation has got

  1. No public code known
  2. Proof of concept
  3. Proof of concept, verified
  4. A Metasploit module
  5. Exploited in the wild
  6. Used in ransomware campaigns

Timeline

2026-10-01first spoke of it: HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability,...GitHub advisories
2026-10-01first spoke of it: HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data.NVD

HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data.

What it is to other things

affectshcltech/bigfix_service_management
NVD
made_byhcltech
NVD

In words only, so not counted until a person confirms one:

made_byhcl_software
NVD says “HCL Software”
affectshcl_software/hcl_bigfix_service_management
NVD says “HCL Software · HCL BigFix Service Management”
Every value, with what each source said and its receipt
PropertySourceSaidMeans here
Automatable
automatable
NVDno
At least one of those steps needs a person.
receipt
Source
NVD
Its words
no
Read by
field:cve.metrics.ssvcV203[].ssvcData.options[].automatable
Said since
2026-10-06 12:31 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 12:31 UTCno
2026-10-02 12:00 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "product": "HCL BigFix Service Management",
            "vendor": "HCL Software",
            "versions": [
              {
                "status": "affected",
                "version": "Version 27"
              }
            ]
          }
        ],
        "source": "psirt@hcl.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:hcltech:bigfix_service_management:27:-:*:*:*:*:*:*",
                "matchCriteriaId": "08B2E58A-98AF-44B9-A25D-84B0A4B209CC",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data."
      }
    ],
    "id": "CVE-2026-56589",
    "lastModified": "2026-10-05T17:25:18.910",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 2.7,
          "source": "psirt@hcl.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-56589",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-10-01T15:19:19.634495Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-10-01T15:17:30.340",
    "references": [
      {
        "source": "psirt@hcl.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015"
      }
    ],
    "sourceIdentifier": "psirt@hcl.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-79"
          }
        ],
        "source": "psirt@hcl.com",
        "type": "Secondary"
      }
    ]
  }
}
—
CVSS
cvss
GitHub advisories7.2
receipt
Source
GitHub advisories
Its words
7.2
Read by
field:cvss.score
Said since
2026-10-02 11:59 UTC
Last answered
2026-10-06 13:46 UTC
Original
open at the source
What the source handed over
{
  "credits": [],
  "cve_id": "CVE-2026-56589",
  "cvss": {
    "score": 7.2,
    "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 7.2,
      "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N"
    },
    "cvss_v4": {
      "score": 0.0,
      "vector_string": null
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-79",
      "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
    }
  ],
  "description": "HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data.",
  "ghsa_id": "GHSA-6pm7-6945-rv79",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-6pm7-6945-rv79",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-6pm7-6945-rv79"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-56589"
    }
  ],
  "nvd_published_at": "2026-10-01T15:17:30Z",
  "published_at": "2026-10-01T15:30:42Z",
  "references": [
    "https://nvd.nist.gov/vuln/detail/CVE-2026-56589",
    "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015",
    "https://github.com/advisories/GHSA-6pm7-6945-rv79"
  ],
  "repository_advisory_url": null,
  "severity": "high",
  "source_code_location": "",
  "summary": "HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability,...",
  "type": "unreviewed",
  "updated_at": "2026-10-01T15:30:50Z",
  "url": "https://api.github.com/advisories/GHSA-6pm7-6945-rv79",
  "vulnerabilities": [],
  "withdrawn_at": null
}
—
CVSS
cvss
NVD7.2
receipt
Source
NVD
Its words
7.2
Read by
field:cve.metrics.cvssMetricV31[type=Primary].cvssData.baseScore || field:cve.metrics.cvssMetricV31[].cvssData.baseScore
Said since
2026-10-02 12:00 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "product": "HCL BigFix Service Management",
            "vendor": "HCL Software",
            "versions": [
              {
                "status": "affected",
                "version": "Version 27"
              }
            ]
          }
        ],
        "source": "psirt@hcl.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:hcltech:bigfix_service_management:27:-:*:*:*:*:*:*",
                "matchCriteriaId": "08B2E58A-98AF-44B9-A25D-84B0A4B209CC",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data."
      }
    ],
    "id": "CVE-2026-56589",
    "lastModified": "2026-10-05T17:25:18.910",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 2.7,
          "source": "psirt@hcl.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-56589",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-10-01T15:19:19.634495Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-10-01T15:17:30.340",
    "references": [
      {
        "source": "psirt@hcl.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015"
      }
    ],
    "sourceIdentifier": "psirt@hcl.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-79"
          }
        ],
        "source": "psirt@hcl.com",
        "type": "Secondary"
      }
    ]
  }
}
—
CVSS vector
cvss_vector
NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
receipt
Source
NVD
Its words
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Read by
field:cve.metrics.cvssMetricV31[type=Primary].cvssData.vectorString || field:cve.metrics.cvssMetricV31[].cvssData.vectorString
Said since
2026-10-06 12:31 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 12:31 UTCCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
2026-10-02 12:00 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "product": "HCL BigFix Service Management",
            "vendor": "HCL Software",
            "versions": [
              {
                "status": "affected",
                "version": "Version 27"
              }
            ]
          }
        ],
        "source": "psirt@hcl.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:hcltech:bigfix_service_management:27:-:*:*:*:*:*:*",
                "matchCriteriaId": "08B2E58A-98AF-44B9-A25D-84B0A4B209CC",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data."
      }
    ],
    "id": "CVE-2026-56589",
    "lastModified": "2026-10-05T17:25:18.910",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 2.7,
          "source": "psirt@hcl.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-56589",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-10-01T15:19:19.634495Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-10-01T15:17:30.340",
    "references": [
      {
        "source": "psirt@hcl.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015"
      }
    ],
    "sourceIdentifier": "psirt@hcl.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-79"
          }
        ],
        "source": "psirt@hcl.com",
        "type": "Secondary"
      }
    ]
  }
}
—
CWE
cwe
GitHub advisoriesCWE-79
receipt
Source
GitHub advisories
Its words
CWE-79
Read by
field:cwes[].cwe_id
Said since
2026-10-02 11:59 UTC
Last answered
2026-10-06 13:46 UTC
Original
open at the source
What the source handed over
{
  "credits": [],
  "cve_id": "CVE-2026-56589",
  "cvss": {
    "score": 7.2,
    "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 7.2,
      "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N"
    },
    "cvss_v4": {
      "score": 0.0,
      "vector_string": null
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-79",
      "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
    }
  ],
  "description": "HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data.",
  "ghsa_id": "GHSA-6pm7-6945-rv79",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-6pm7-6945-rv79",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-6pm7-6945-rv79"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-56589"
    }
  ],
  "nvd_published_at": "2026-10-01T15:17:30Z",
  "published_at": "2026-10-01T15:30:42Z",
  "references": [
    "https://nvd.nist.gov/vuln/detail/CVE-2026-56589",
    "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015",
    "https://github.com/advisories/GHSA-6pm7-6945-rv79"
  ],
  "repository_advisory_url": null,
  "severity": "high",
  "source_code_location": "",
  "summary": "HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability,...",
  "type": "unreviewed",
  "updated_at": "2026-10-01T15:30:50Z",
  "url": "https://api.github.com/advisories/GHSA-6pm7-6945-rv79",
  "vulnerabilities": [],
  "withdrawn_at": null
}
—
CWE
cwe
NVDCWE-79
receipt
Source
NVD
Its words
CWE-79
Read by
field:cve.weaknesses[].description[].value
Said since
2026-10-06 12:31 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 12:31 UTCCWE-79
2026-10-02 12:00 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "product": "HCL BigFix Service Management",
            "vendor": "HCL Software",
            "versions": [
              {
                "status": "affected",
                "version": "Version 27"
              }
            ]
          }
        ],
        "source": "psirt@hcl.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:hcltech:bigfix_service_management:27:-:*:*:*:*:*:*",
                "matchCriteriaId": "08B2E58A-98AF-44B9-A25D-84B0A4B209CC",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data."
      }
    ],
    "id": "CVE-2026-56589",
    "lastModified": "2026-10-05T17:25:18.910",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 2.7,
          "source": "psirt@hcl.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-56589",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-10-01T15:19:19.634495Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-10-01T15:17:30.340",
    "references": [
      {
        "source": "psirt@hcl.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015"
      }
    ],
    "sourceIdentifier": "psirt@hcl.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-79"
          }
        ],
        "source": "psirt@hcl.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Exploitation
exploitation
NVDnone
No evidence of exploitation, and no public proof of concept.
receipt
Source
NVD
Its words
none
Read by
field:cve.metrics.ssvcV203[].ssvcData.options[].exploitation
Said since
2026-10-06 12:31 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 12:31 UTCnone
2026-10-02 12:00 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "product": "HCL BigFix Service Management",
            "vendor": "HCL Software",
            "versions": [
              {
                "status": "affected",
                "version": "Version 27"
              }
            ]
          }
        ],
        "source": "psirt@hcl.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:hcltech:bigfix_service_management:27:-:*:*:*:*:*:*",
                "matchCriteriaId": "08B2E58A-98AF-44B9-A25D-84B0A4B209CC",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data."
      }
    ],
    "id": "CVE-2026-56589",
    "lastModified": "2026-10-05T17:25:18.910",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 2.7,
          "source": "psirt@hcl.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-56589",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-10-01T15:19:19.634495Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-10-01T15:17:30.340",
    "references": [
      {
        "source": "psirt@hcl.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015"
      }
    ],
    "sourceIdentifier": "psirt@hcl.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-79"
          }
        ],
        "source": "psirt@hcl.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Product
product
NVDHCL BigFix Service Management
receipt
Source
NVD
Its words
HCL BigFix Service Management
Read by
field:cve.affected[].affectedData[].product
Said since
2026-10-02 12:00 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "product": "HCL BigFix Service Management",
            "vendor": "HCL Software",
            "versions": [
              {
                "status": "affected",
                "version": "Version 27"
              }
            ]
          }
        ],
        "source": "psirt@hcl.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:hcltech:bigfix_service_management:27:-:*:*:*:*:*:*",
                "matchCriteriaId": "08B2E58A-98AF-44B9-A25D-84B0A4B209CC",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data."
      }
    ],
    "id": "CVE-2026-56589",
    "lastModified": "2026-10-05T17:25:18.910",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 2.7,
          "source": "psirt@hcl.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-56589",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-10-01T15:19:19.634495Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-10-01T15:17:30.340",
    "references": [
      {
        "source": "psirt@hcl.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015"
      }
    ],
    "sourceIdentifier": "psirt@hcl.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-79"
          }
        ],
        "source": "psirt@hcl.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Severity
severity
GitHub advisorieshigh
From 7.0 to 8.9.
receipt
Source
GitHub advisories
Its words
high
Read by
field:severity
Said since
2026-10-02 11:59 UTC
Last answered
2026-10-06 13:46 UTC
Original
open at the source
What the source handed over
{
  "credits": [],
  "cve_id": "CVE-2026-56589",
  "cvss": {
    "score": 7.2,
    "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 7.2,
      "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N"
    },
    "cvss_v4": {
      "score": 0.0,
      "vector_string": null
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-79",
      "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
    }
  ],
  "description": "HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data.",
  "ghsa_id": "GHSA-6pm7-6945-rv79",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-6pm7-6945-rv79",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-6pm7-6945-rv79"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-56589"
    }
  ],
  "nvd_published_at": "2026-10-01T15:17:30Z",
  "published_at": "2026-10-01T15:30:42Z",
  "references": [
    "https://nvd.nist.gov/vuln/detail/CVE-2026-56589",
    "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015",
    "https://github.com/advisories/GHSA-6pm7-6945-rv79"
  ],
  "repository_advisory_url": null,
  "severity": "high",
  "source_code_location": "",
  "summary": "HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability,...",
  "type": "unreviewed",
  "updated_at": "2026-10-01T15:30:50Z",
  "url": "https://api.github.com/advisories/GHSA-6pm7-6945-rv79",
  "vulnerabilities": [],
  "withdrawn_at": null
}
—
Severity
severity
NVDHIGH
From 7.0 to 8.9.
receipt
Source
NVD
Its words
HIGH
Read by
field:cve.metrics.cvssMetricV31[type=Primary].cvssData.baseSeverity || field:cve.metrics.cvssMetricV31[].cvssData.baseSeverity
Said since
2026-10-06 12:31 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 12:31 UTCHIGH
2026-10-02 12:00 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "product": "HCL BigFix Service Management",
            "vendor": "HCL Software",
            "versions": [
              {
                "status": "affected",
                "version": "Version 27"
              }
            ]
          }
        ],
        "source": "psirt@hcl.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:hcltech:bigfix_service_management:27:-:*:*:*:*:*:*",
                "matchCriteriaId": "08B2E58A-98AF-44B9-A25D-84B0A4B209CC",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data."
      }
    ],
    "id": "CVE-2026-56589",
    "lastModified": "2026-10-05T17:25:18.910",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 2.7,
          "source": "psirt@hcl.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-56589",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-10-01T15:19:19.634495Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-10-01T15:17:30.340",
    "references": [
      {
        "source": "psirt@hcl.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015"
      }
    ],
    "sourceIdentifier": "psirt@hcl.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-79"
          }
        ],
        "source": "psirt@hcl.com",
        "type": "Secondary"
      }
    ]
  }
}
high
Status
status
NVDAnalyzed
receipt
Source
NVD
Its words
Analyzed
Read by
field:cve.vulnStatus
Said since
2026-10-05 18:25 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-05 18:25 UTCAnalyzed
2026-10-02 12:00 UTCAwaiting Analysis
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "product": "HCL BigFix Service Management",
            "vendor": "HCL Software",
            "versions": [
              {
                "status": "affected",
                "version": "Version 27"
              }
            ]
          }
        ],
        "source": "psirt@hcl.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:hcltech:bigfix_service_management:27:-:*:*:*:*:*:*",
                "matchCriteriaId": "08B2E58A-98AF-44B9-A25D-84B0A4B209CC",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data."
      }
    ],
    "id": "CVE-2026-56589",
    "lastModified": "2026-10-05T17:25:18.910",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 2.7,
          "source": "psirt@hcl.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-56589",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-10-01T15:19:19.634495Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-10-01T15:17:30.340",
    "references": [
      {
        "source": "psirt@hcl.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015"
      }
    ],
    "sourceIdentifier": "psirt@hcl.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-79"
          }
        ],
        "source": "psirt@hcl.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Technical impact
technical_impact
NVDpartial
The attacker gains limited control, or limited information.
receipt
Source
NVD
Its words
partial
Read by
field:cve.metrics.ssvcV203[].ssvcData.options[].technicalImpact
Said since
2026-10-06 12:31 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 12:31 UTCpartial
2026-10-02 12:00 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "product": "HCL BigFix Service Management",
            "vendor": "HCL Software",
            "versions": [
              {
                "status": "affected",
                "version": "Version 27"
              }
            ]
          }
        ],
        "source": "psirt@hcl.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:hcltech:bigfix_service_management:27:-:*:*:*:*:*:*",
                "matchCriteriaId": "08B2E58A-98AF-44B9-A25D-84B0A4B209CC",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data."
      }
    ],
    "id": "CVE-2026-56589",
    "lastModified": "2026-10-05T17:25:18.910",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 2.7,
          "source": "psirt@hcl.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-56589",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-10-01T15:19:19.634495Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-10-01T15:17:30.340",
    "references": [
      {
        "source": "psirt@hcl.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015"
      }
    ],
    "sourceIdentifier": "psirt@hcl.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-79"
          }
        ],
        "source": "psirt@hcl.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Vendor
vendor
NVDHCL Software
receipt
Source
NVD
Its words
HCL Software
Read by
field:cve.affected[].affectedData[].vendor
Said since
2026-10-02 12:00 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "unaffected",
            "product": "HCL BigFix Service Management",
            "vendor": "HCL Software",
            "versions": [
              {
                "status": "affected",
                "version": "Version 27"
              }
            ]
          }
        ],
        "source": "psirt@hcl.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:hcltech:bigfix_service_management:27:-:*:*:*:*:*:*",
                "matchCriteriaId": "08B2E58A-98AF-44B9-A25D-84B0A4B209CC",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data."
      }
    ],
    "id": "CVE-2026-56589",
    "lastModified": "2026-10-05T17:25:18.910",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 2.7,
          "source": "psirt@hcl.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-56589",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-10-01T15:19:19.634495Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-10-01T15:17:30.340",
    "references": [
      {
        "source": "psirt@hcl.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015"
      }
    ],
    "sourceIdentifier": "psirt@hcl.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-79"
          }
        ],
        "source": "psirt@hcl.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Every claim, by kind

vulnerability

HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data.
zetlyn/cve-nvd · 2026-10-01
automatable no cvss 7.2 cvss_vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N cwe CWE-79 exploitation none product HCL BigFix Service Management severity HIGH status Analyzed technical_impact partial vendor HCL Software source
HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability,...
zetlyn/cve-ghsa · 2026-10-01
cvss 7.2 cwe CWE-79 severity high source