CVE Catalog
CVE-2026-56619
MediumCVSS 5.4Summary
HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS) due to insufficient validation and output encoding of user-controlled input.
Risk Assessment
An attacker can execute malicious scripts in the victim's browser, potentially leading to session theft, account takeover, or display of fraudulent content.
Recommendation
Strengthen input validation and output encoding in HCL BigFix Mobile and update to a patched version.
Original NVD description (English source)
HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS) due to insufficient validation and output encoding of user-controlled input.