Skip to content
Sign in
6.5 Medium

CVE-2023-28009 HCL Workload Automation is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data

Description

HCL Workload Automation is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

Affected products and versions

Product Affected versions Fixed in
Workload Automation Versions not published

Other CVEs of Workload Automation

The 2 CVEs of Workload Automation →
CVE-2023-28008 HCL Workload Automation 9.4, 9.5, and 10.1 are vulnerable to an XML External Entity Injection (XXE) attack when… 7.1 High
Track this CVE