nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-21821 CVE-2026-21821
HIGH
HCL BigFix SCM Reporting is affected by vulnerabilities in jQuery
Record summary
CVE-2026-21821 has a selected CVSS score of 8.3 (high).
Description
The HCL BigFix SCM Reporting site contains an outdated and unsupported version of the jQuery 1.x library. Since jQuery 1.x has reached end-of-life and no longer receives security updates, it may expose the application to publicly known security weaknesses and increase the risk of client-side attacks such as Cross-Site Scripting (XSS) or manipulation through vulnerable third-party components.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated May 14, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
BigFix SCM ReportingBrowse HCLSoftware / BigFix SCM ReportingDefault status: unaffected | CVE List | 11.0.5 | affected |
References
2support.hcl-software.com
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130744