3.0
Faible
CVE-2024-23553 A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform exists due to missing a…
Description
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform exists due to missing a specific http header attribute.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BigFix Platform | Versions non publiées |
Autres CVE de BigFix Platform
Les 22 CVE de BigFix Platform →
CVE-2026-108013
BigFix Platform uses Mozilla CA certificate bundle (PEM)
6.8
Moyenne
CVE-2024-30117
A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file…
2.5
Faible
CVE-2024-23556
SSL/TLS Renegotiation functionality potentially leading to DoS attack vulnerability
5.9
Moyenne
CVE-2024-23554
Cross-Site Request Forgery (CSRF) on Session Token vulnerability that could potentially lead to Remote Code Execution…
5.7
Moyenne