5.4
Moyenne
CVE-2023-37527 A reflected cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly…
Description
A reflected cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code in the application session or in database, via remote injection, while rendering content in a web page.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BigFix Platform | Versions non publiées |
Autres CVE de BigFix Platform
Les 22 CVE de BigFix Platform →
CVE-2026-108013
BigFix Platform uses Mozilla CA certificate bundle (PEM)
6.8
Moyenne
CVE-2024-30117
A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file…
2.5
Faible
CVE-2024-23556
SSL/TLS Renegotiation functionality potentially leading to DoS attack vulnerability
5.9
Moyenne
CVE-2024-23554
Cross-Site Request Forgery (CSRF) on Session Token vulnerability that could potentially lead to Remote Code Execution…
5.7
Moyenne