5.5 Medium

CVE-2023-28019 Insufficient validation in Bigfix WebUI API App site version < 14 allows an authenticated WebUI user to issue SQL…

Description

Insufficient validation in Bigfix WebUI API App site version < 14 allows an authenticated WebUI user to issue SQL queries via an unparameterized SQL query.

Affected products and versions

Product	Affected versions	Fixed in
HCL BigFix WebUI API 14	earliest → < 14	14

Do you use HCL BigFix WebUI API?

Track this CVE Watch HCL BigFix WebUI API Check my SBOMs

www.cveye.io/en/cve/CVE-2023-28019

Timeline

Published July 18, 2023
Last modified October 21, 2024

References

support.hcltechsw.com support.hcltechsw.com

Track this CVE