CVE-2024-42183: Hcl Software Bigfix Patch Management Download Plug-Ins

Low severity, CVSS 2.5. EPSS: 0.1% chance of exploitation in the next 30 days.

BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerability. It could allow a malicious operator to download files from arbitrary URLs without any proper validation or allowlist controls.

Affected products

• Hcl Software Bigfix Patch Management Download Plug-Ins: up to and including 1177

Published 2025-01-23. Last modified 2026-06-17.