← CVE Intelligence

CVE-2023-37520

HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS) PUBLISHED

Description (CNA)

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data exfiltration. This XSS vulnerability is in the Gather Status Report, which is served by the BigFix Relay.

Affected (CNA)

Vendor / productVersions
HCL Software / HCL BigFix Platformaffected 9.5.x, 10.0.x, 11.0.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.