4.7
Medium
CVE-2024-30126 HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a…
Description
HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a malicious website that embeds the target website in a frame or iframe, tricking users into performing actions on the target website without their knowledge.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix Compliance | 2.0.x | No fix stated |
Other CVEs of BigFix Compliance
The 6 CVEs of BigFix Compliance →
CVE-2024-30142
HCL BigFix Compliance is affected by a missing secure flag on a cookie
3.8
Low
CVE-2024-30141
HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information
4.7
Medium
CVE-2024-30140
HCL BigFix Compliance is affected by unvalidated redirects and forwards
5.4
Medium
CVE-2024-30125
HCL BigFix Compliance server can respond with an HTTP status of 500, indicating a server-side error that may cause the…
6.2
Medium