CVE-2024-30125: falha de média gravidade em HCL Software BigFix Compliance
HCL BigFix Compliance is affected by an internal server error
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.2epss 0.1%
HCL BigFix Compliance server can respond with an HTTP status of 500, indicating a server-side error that may cause the server process to die.
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L
Produtos afetados
HCL Software · BigFix ComplianceCVEs relacionadas — HCL Software BigFix Compliance
No mesmo produto, das mais perigosas para as menos.
CVE-2024-30141MEDIUMHCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive informationEPSS 0.3%CVE-2024-30140MEDIUMHCL BigFix Compliance is affected by unvalidated redirects and forwardsEPSS 0.3%CVE-2024-30126MEDIUMHCL BigFix Compliance is affected by a missing X-Frame-Options Header vulnerabilityEPSS 0.2%CVE-2024-23551MEDIUMHCL BigFix Compliance is potentially affected by Oracle database credentials stored at endpointEPSS 0.2%CVE-2024-30142LOWHCL BigFix Compliance is affected by a missing secure flag on a cookieEPSS 0.1%