CVE-2024-42212: Hcltech Bigfix Compliance

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery (CSRF) attacks, where a malicious site could trick a user's browser into making unintended requests using authenticated sessions.

Affected products

• Hcltech Bigfix Compliance: version 2.0.12 only

Published 2025-05-05. Last modified 2026-06-17.