4.7
Moyenne
CVE-2024-30126 HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a…
Description
HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a malicious website that embeds the target website in a frame or iframe, tricking users into performing actions on the target website without their knowledge.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BigFix Compliance | 2.0.x | Pas de correctif indiqué |
Autres CVE de BigFix Compliance
Les 6 CVE de BigFix Compliance →
CVE-2024-30142
HCL BigFix Compliance is affected by a missing secure flag on a cookie
3.8
Faible
CVE-2024-30141
HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information
4.7
Moyenne
CVE-2024-30140
HCL BigFix Compliance is affected by unvalidated redirects and forwards
5.4
Moyenne
CVE-2024-30125
HCL BigFix Compliance server can respond with an HTTP status of 500, indicating a server-side error that may cause the…
6.2
Moyenne