Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2023-37520

HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data exfiltration. This XSS vulnerability is in the Gather Status Report, which is served by the BigFix Relay.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software HCL BigFix Platform

Default version status: unaffected

  • 9.5.x, 10.0.x, 11.0.0affected

References