Medium severity4.3NVD Advisory· Published May 6, 2022· Updated Jun 17, 2026

CVE-2021-27758

Description

There is a security vulnerability in login form related to Cross-site Request Forgery which prevents user to login after attacker spam to login and system blocked victim's account.

Affected products

HCLTech/Bigfix Inventory
cpe:2.3:a:hcltech:bigfix_inventory:*:*:*:*:*:*:*:*
Range: >=9.0,<10.0.7.0
HCL Software/Commercellm-create
HCL Software/HCL BigFix Inventoryv5
Range: 9.x

Patches

Vulnerability mechanics

References

support.hcltechsw.com/csmnvdMitigationVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000