CVE-2023-28009medium

CVE-2023-28009: medium-severity vulnerability in HCL Software Workload Automation

HCL Workload Automation is vulnerable to XML External Entity (XXE) Injection

Published · Updated

Follow this CVE+ Monitor Workload Automation

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.8%
In short

HCL Workload Automation can be tricked into processing malicious XML files that reference external entities, allowing an attacker to steal sensitive data or crash the system by consuming excessive memory.

Technical detail

An XXE injection vulnerability exists in HCL Workload Automation's XML parser that fails to disable external entity resolution. A remote, unauthenticated attacker can send crafted XML payloads to expose sensitive files (information disclosure) or trigger denial of service through billion laughs/XML bomb attacks. No special privileges or user interaction required.

Summary generated and translated by AI from the official description.
HCL Workload Automation is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
HCL Software · Workload Automation
Related CVEs — HCL Software Workload Automation

In the same product, most dangerous first.

CVE-2023-28008HIGHHCL Workload Automation is vulnerable to XML External Entity (XXE) InjectionEPSS 0.8%