CVE-2024-42189 MEDIUM

CVE-2024-42189: HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack

Vendor Hcl Software
Product HCL BigFix Platform
Weakness CWE-1287
Published April 15, 2025
Last update April 15, 2025
View on NVD All CVEs

CVSS base score

5.6/10
Attack vector Network
Attack complexity High
Privileges required High
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack, due to a potentially weak validation of an API parameter.

Key dates

02Disclosure timeline

April 15, 2025 CVE published
April 15, 2025 Record updated