CVE-2024-42185CWE-611

HCL BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks

Low · published January 23, 2025

CVSS v3.1
2.5
EPSS
0%
Percentile
2.2
In the wild
Unconfirmed
What it is

BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks. This allows an attacker to exploit this vulnerability by injecting malicious XML content, which can lead to various issues including denial of service and unauthorized access.

The record
Technical detail
CVSS v3.1
2.5 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00127 · 2.2th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2025-01-23T02:10Z
EPSS history
Timeline
  • 23 JAN 02:10Z
    HCL BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks
    cvelistv5