Advisories · Technology
HCL Software BigFix Patch Management Download Plug-ins.
Every CVE that names HCL Software BigFix Patch Management Download Plug-ins among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
HCL BigFix Patch Download Plug-ins are affected by path traversal vulnerability
- HCL Software BigFix Patch Management Download Plug-ins
- Path traversal
- CVSS 2.8 Low
HCL BigFix Patch Download Plug-ins are affected by an insecure protocol support
- HCL Software BigFix Patch Management Download Plug-ins
- Weak cryptography or TLS
- CVSS 2.5 Low
HCL BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks
- HCL Software BigFix Patch Management Download Plug-ins
- XML external entities (XXE)
- CVSS 2.5 Low
HCL BigFix Patch Download Plug-ins are affected by insecure support for file URI scheme
- HCL Software BigFix Patch Management Download Plug-ins
- CWE-84
- CVSS 2.5 Low
HCL BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerability
- HCL Software BigFix Patch Management Download Plug-ins
- CWE-494
- CVSS 2.5 Low
HCL BigFix Patch Download Plug-ins are affected by Server-Side Request Forgery (SSRF) vulnerability
- HCL Software BigFix Patch Management Download Plug-ins
- Server-side request forgery (SSRF)