Hcl Software Bigfix Inventory
2 CVEs affecting Hcl Software Bigfix Inventory. Latest disclosed: 2024-12-17. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-23540 | Medium | 5.3 | 2024-04-03 | The HCL BigFix Inventory server is vulnerable to path traversal which enables an attacker to read internal application files from the Inventory server. The Big… |
CVE-2024-42194 | Low | 3.1 | 2024-12-17 | An improper handling of insufficient permissions or privileges affects HCL BigFix Inventory. An attacker having access via a read-only account can possibly ch… |