CVE-2024-42185: fallo de gravedad baja en HCL Software BigFix Patch Management Download…
HCL BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
8Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 2.5epss 0.1%
BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks. This allows an attacker to exploit this vulnerability by injecting malicious XML content, which can lead to various issues including denial of service and unauthorized access.
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N
Productos afectados
HCL Software · BigFix Patch Management Download Plug-insCVEs relacionadas — HCL Software BigFix Patch Management Download…
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-42187MEDIUMHCL BigFix Patch Download Plug-ins are affected by path traversal vulnerabilityEPSS 0.2%CVE-2024-42184LOWHCL BigFix Patch Download Plug-ins are affected by insecure support for file URI schemeEPSS 0.1%CVE-2024-42182LOWHCL BigFix Patch Download Plug-ins are affected by Server-Side Request Forgery (SSRF) vulnerabilityEPSS 0.1%CVE-2024-42183LOWHCL BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerabilityEPSS 0.1%CVE-2024-42186LOWHCL BigFix Patch Download Plug-ins are affected by an insecure protocol supportEPSS 0.1%