CVE-2024-42185
HCL BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks
Vexday Risk Score
8Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 2.5EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
23 jan 2025Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks. This allows an attacker to exploit this vulnerability by injecting malicious XML content, which can lead to various issues including denial of service and unauthorized access.
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N
Produtos afetados
HCL Software · BigFix Patch Management Download Plug-insQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →