7.7
Élevée
CVE-2023-37520 Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68,…
Description
Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data exfiltration. This XSS vulnerability is in the Gather Status Report, which is served by the BigFix Relay.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HCL BigFix Platform | Versions non publiées |
Autres CVE de HCL BigFix Platform
Les 5 CVE de HCL BigFix Platform →
CVE-2024-42193
HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate…
2.1
Faible
CVE-2024-42189
HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack, due to a potentially weak validation of…
5.6
Moyenne
CVE-2024-42200
HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially weak…
4.8
Moyenne
CVE-2023-37519
Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability
7.7
Élevée