Skip to content
Sign in
7.1 High

CVE-2023-28008 HCL Workload Automation 9.4, 9.5, and 10.1 are vulnerable to an XML External Entity Injection (XXE) attack when…

Description

HCL Workload Automation 9.4, 9.5, and 10.1 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

Affected products and versions

Product Affected versions Fixed in
Workload Automation Versions not published

Other CVEs of Workload Automation

The 2 CVEs of Workload Automation →
CVE-2023-28009 HCL Workload Automation is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data 6.5 Medium
Track this CVE