CVE-2024-42184: Hcl Software Bigfix Patch Management Download Plug-Ins

Low severity, CVSS 2.5. EPSS: 0.1% chance of exploitation in the next 30 days.

BigFix Patch Download Plug-ins are affected by insecure support for file URI scheme. It could allow a malicious operator to attempt to download files using the file:// URI scheme.

Affected products

• Hcl Software Bigfix Patch Management Download Plug-Ins: up to and including 1177

Published 2025-01-23. Last modified 2026-06-17.