CVE-2024-42189CWE-1287

HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack

Medium · published April 15, 2025

CVSS v4.0
5.6
EPSS
0%
Percentile
21.6
In the wild
Unconfirmed
What it is

HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack, due to a potentially weak validation of an API parameter.

The record
Technical detail
CVSS v4.0
5.6 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00301 · 21.6th percentile
Weakness
CWE-1287 · Improper Validation of Specified Type of Input
Published
2025-04-15T18:07Z
EPSS history
Timeline
  • 15 APR 18:07Z
    HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack
    cvelistv5