Hcl Software Hcl Bigfix Compliance
2 CVEs affecting Hcl Software Hcl Bigfix Compliance. Latest disclosed: 2025-05-05. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-42212 | Medium | 5.4 | 2025-05-05 | HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery (CSRF) attacks, where a malicious… |
CVE-2024-42213 | Medium | 5.3 | 2025-05-05 | HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment. An attacker might gain access to these files by indexing… |