CVE-2026-21821

Description

The HCL BigFix SCM Reporting site contains an outdated and unsupported version of the jQuery 1.x library. Since jQuery 1.x has reached end-of-life and no longer receives security updates, it may expose the application to publicly known security weaknesses and increase the risk of client-side attacks such as Cross-Site Scripting (XSS) or manipulation through vulnerable third-party components.

PUBLISHED Reserved 2026-01-05 | Published 2026-05-13 | Updated 2026-05-14 | Assigner HCL

Problem types

CWE-1104 Use of unmaintained third party components

Product status

References

support.hcl-software.com/...rticle&sysparm_article=KB0130744

cve.org (CVE-2026-21821)

nvd.nist.gov (CVE-2026-21821)

Download JSON