BP
Product
BigFix Patch Management Download Plug-ins
6
CVEs
0
On KEV
5.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 5
Watch
Add BigFix Patch Management Download Plug-ins to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-42187 | 5.3 | Jan 23 | HCL BigFix Patch Download Plug-ins are affected by path traversal vulnerability Affected: 1177 and below |
| CVE-2024-42186 | 2.8 | Jan 23 | HCL BigFix Patch Download Plug-ins are affected by an insecure protocol support Affected: 1177 and below |
| CVE-2024-42185 | 2.5 | Jan 23 | HCL BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks Affected: 1177 and below |
| CVE-2024-42184 | 2.5 | Jan 23 | HCL BigFix Patch Download Plug-ins are affected by insecure support for file URI scheme Affected: 1177 and below |
| CVE-2024-42183 | 2.5 | Jan 23 | HCL BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerability Affected: 1177 and below |
| CVE-2024-42182 | 2.5 | Jan 23 | HCL BigFix Patch Download Plug-ins are affected by Server-Side Request Forgery (SSRF) vulnerability Affected: 1177 and below |
Showing 6