2.5
Low
CVE-2024-42185 BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks
Description
BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks. This allows an attacker to exploit this vulnerability by injecting malicious XML content, which can lead to various issues including denial of service and unauthorized access.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix Patch Management Download Plug-ins | Versions not published |
Other CVEs of BigFix Patch Management Download Plug-ins
The 6 CVEs of BigFix Patch Management Download Plug-ins →
CVE-2024-42187
BigFix Patch Download Plug-ins are affected by path traversal vulnerability
5.3
Medium
CVE-2024-42186
BigFix Patch Download Plug-ins are affected by an insecure protocol support
2.8
Low
CVE-2024-42184
BigFix Patch Download Plug-ins are affected by insecure support for file URI scheme
2.5
Low
CVE-2024-42183
BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerability
2.5
Low