Sign in

7.7 High

CVE-2023-37519 Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Description

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. This XSS vulnerability is in the Download Status Report, which is served by the BigFix Server.

Affected products and versions

Product	Affected versions	Fixed in
HCL BigFix Platform	Versions not published

The 5 CVEs of HCL BigFix Platform →

CVE-2024-42193 HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate… 2.1 Low CVE-2024-42189 HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack, due to a potentially weak validation of… 5.6 Medium CVE-2024-42200 HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially weak… 4.8 Medium CVE-2023-37520 Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68,… 7.7 High

Do you use HCL BigFix Platform?

Track this CVE Watch HCL BigFix Platform Check my SBOMs

www.cveye.io/en/cve/CVE-2023-37519

Timeline

Published December 21, 2023
Last modified April 23, 2025

References

support.hcltechsw.com support.hcltechsw.com

Track this CVE