Hcl Bigfix Compliance
Approved changes feed: RSS · Atom
cpe:2.3:a:hcl_software:hcl_bigfix_compliance:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847) |
|---|---|
| Product | Hcl Bigfix Compliance (869c8f98-3e91-5876-98ff-419ecf1d1356) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-42213 |
vulnerable | 2026-06-08 06:43:56.309682 |
HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment
MEDIUM (5.3)
HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment. An attacker might gain access to these files by indexing or retrieved via predictable URLs or misconfigured permissions, leading to information disclosure.
Published: 2025-05-05T19:00:33.692Z
Updated: 2025-05-05T19:05:39.547Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42212 |
vulnerable | 2026-06-08 06:43:56.304927 |
HCL BigFix Compliance is affected by an improper or missing SameSite attribute
MEDIUM (5.4)
HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery (CSRF) attacks, where a malicious site could trick a user's browser into making unintended requests using authenticated sessions.
Published: 2025-05-05T18:40:57.390Z
Updated: 2025-05-05T19:01:02.378Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.