CVE-2024-42182: Hcl Software Bigfix Patch Management Download Plug-Ins

Low severity, CVSS 2.5. EPSS: 0.1% chance of exploitation in the next 30 days.

BigFix Patch Download Plug-ins are affected by Server-Side Request Forgery (SSRF) vulnerability. It may allow the application to download files from an internally hosted server on localhost.

Affected products

• Hcl Software Bigfix Patch Management Download Plug-Ins: up to and including 1177

Published 2025-01-23. Last modified 2026-06-17.