Bigfix Patch Management Download Plug Ins
Approved changes feed: RSS · Atom
cpe:2.3:a:hcl_software:bigfix_patch_management_download_plug-ins:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847) |
|---|---|
| Product | Bigfix Patch Management Download Plug Ins (52878d8a-9ced-5e70-891b-98afa49f6a61) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-42187 |
vulnerable | 2026-06-08 06:43:56.268327 |
HCL BigFix Patch Download Plug-ins are affected by path traversal vulnerability
MEDIUM (5.3)
BigFix Patch Download Plug-ins are affected by path traversal vulnerability. The application could allow operators to download files from a local repository which is vulnerable to path traversal attacks.
Published: 2025-01-23T02:53:07.305Z
Updated: 2025-01-23T15:00:41.338Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42186 |
vulnerable | 2026-06-08 06:43:56.268104 |
HCL BigFix Patch Download Plug-ins are affected by an insecure protocol support
LOW (2.8)
BigFix Patch Download Plug-ins are affected by an insecure protocol support. The application can allow improper handling of SSL certificates validation.
Published: 2025-01-23T02:47:40.896Z
Updated: 2025-01-23T15:01:15.665Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42185 |
vulnerable | 2026-06-08 06:43:56.267828 |
HCL BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks
LOW (2.5)
BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks. This allows an attacker to exploit this vulnerability by injecting malicious XML content, which can lead to various issues including denial of service and unauthorized access.
Published: 2025-01-23T02:10:02.525Z
Updated: 2025-01-23T14:51:45.463Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42184 |
vulnerable | 2026-06-08 06:43:56.267481 |
HCL BigFix Patch Download Plug-ins are affected by insecure support for file URI scheme
LOW (2.5)
BigFix Patch Download Plug-ins are affected by insecure support for file URI scheme. It could allow a malicious operator to attempt to download files using the file:// URI scheme.
Published: 2025-01-23T01:59:00.971Z
Updated: 2025-01-23T14:53:08.031Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42183 |
vulnerable | 2026-06-08 06:43:56.267224 |
HCL BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerability
LOW (2.5)
BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerability. It could allow a malicious operator to download files from arbitrary URLs without any proper validation or allowlist controls.
Published: 2025-01-23T01:42:47.496Z
Updated: 2025-01-23T14:53:30.106Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42182 |
vulnerable | 2026-06-08 06:43:56.266792 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.