← CVE Intelligence

CVE-2023-28009

HCL Workload Automation is vulnerable to XML External Entity (XXE) Injection PUBLISHED

Description (CNA)

HCL Workload Automation is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

Affected (CNA)

Vendor / productVersions
HCL Software / Workload Automationaffected <=9.5.0.6, 10.1.0.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.