6.6
Moyenne
CVE-2023-28025 Due to this vulnerability, the Master operator could potentially incorporate an SVG tag into HTML, leading to an alert…
Description
Due to this vulnerability, the Master operator could potentially incorporate an SVG tag into HTML, leading to an alert pop-up displaying a cookie. To mitigate stored XSS vulnerabilities, a preventive measure involves thoroughly sanitizing and validating all user inputs before they are processed and stored in the server storage.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HCL BigFix Mobile / Modern Client Management 3.1 | premières → 3.1 | Pas de correctif indiqué |
Autres CVE de HCL BigFix Mobile / Modern Client Management
Les 4 CVE de HCL BigFix Mobile / Modern Client Management →
CVE-2021-27781
The Master operator may be able to embed script tag in HTML with alert pop-up display cookie
6.6
Moyenne
CVE-2021-27780
The software may be vulnerable to both Un-Auth XML interaction and unauthenticated device enrollment
5.3
Moyenne
CVE-2021-27783
User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed
6.8
Moyenne