5.6
Medium
CVE-2023-37523 Missing or insecure tags in the HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower could allow an attacker…
Description
Missing or insecure tags in the HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower could allow an attacker to execute a malicious script on the user's browser.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL BigFix OSD Bare Metal Server WebUI 311.19 | earliest → 311.19 | No fix stated |
| bigfix_bare_osd_metal_server_webui | Versions not published |