<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: hcl-software-bigfix-patch-management-download-plug-ins</title><description>Every new CVE for hcl-software-bigfix-patch-management-download-plug-ins.</description><link>https://agentprime.io/</link><item><title>CVE-2024-42187: HCL BigFix Patch Download Plug-ins are affected by path traversal vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-42187/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-42187/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Jan 2025 02:53:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-42186: HCL BigFix Patch Download Plug-ins are affected by an insecure protocol support</title><link>https://agentprime.io/advisories/CVE-2024-42186/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-42186/</guid><description>CVSS 2.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Jan 2025 02:47:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-42185: HCL BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks</title><link>https://agentprime.io/advisories/CVE-2024-42185/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-42185/</guid><description>CVSS 2.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Jan 2025 02:10:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-42184: HCL BigFix Patch Download Plug-ins are affected by insecure support for file URI scheme</title><link>https://agentprime.io/advisories/CVE-2024-42184/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-42184/</guid><description>CVSS 2.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Jan 2025 01:59:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-42183: HCL BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-42183/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-42183/</guid><description>CVSS 2.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Jan 2025 01:42:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-42182: HCL BigFix Patch Download Plug-ins are affected by Server-Side Request Forgery (SSRF) vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-42182/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-42182/</guid><description>CVSS 2.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Jan 2025 01:05:52 GMT</pubDate><category>CVE</category></item></channel></rss>