Skip to content
Sign in
7.7 High

CVE-2023-37520 Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68,…

Description

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data exfiltration. This XSS vulnerability is in the Gather Status Report, which is served by the BigFix Relay.

Affected products and versions

Product Affected versions Fixed in
HCL BigFix Platform Versions not published

Other CVEs of HCL BigFix Platform

The 5 CVEs of HCL BigFix Platform →
CVE-2024-42193 HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate… 2.1 Low CVE-2024-42189 HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack, due to a potentially weak validation of… 5.6 Medium CVE-2024-42200 HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially weak… 4.8 Medium CVE-2023-37519 Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability 7.7 High
Track this CVE