CVE-2026-21821
High · 8.3CVSS
8.3
EPSS
0.2%
Published
May 13, 2026
CISA due date
—
The record
The HCL BigFix SCM Reporting site contains an outdated and unsupported version of the jQuery 1.x library. Since jQuery 1.x has reached end-of-life and no longer receives security updates, it may expose the application to publicly known security weaknesses and increase the risk of client-side attacks such as Cross-Site Scripting (XSS) or manipulation through vulnerable third-party components.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-11325 Description Cloudflare was recently notified by external researchers of vulnerabilities… CWE-1104
- CVE-2024-23581 The HCL Traveler for Microsoft Outlook libraries are being flagged as potentially… CWE-1104
- CVE-2026-41468 Beghelli Sicuro24 SicuroWeb embeds AngularJS 1.5.2, an end-of-life component containing… CWE-1104
- CVE-2025-55277 HCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerability… CWE-1104
- CVE-2025-20010 Use of unmaintained third party components for some Intel(R) Processor Identification… CWE-1104