CVE-2023-28016low

CVE-2023-28016: low-severity vulnerability in HCL BigFix OSD Bare Metal Server

HCL BigFix OSD Bare Metal Server is affected by a host header injection vulnerability

Published · Updated

Follow this CVE+ Monitor HCL BigFix OSD Bare Metal Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.1epss 0.3%
Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Bare Metal Server to perform a redirect to an attacker-controlled domain.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
HCL Software · HCL BigFix OSD Bare Metal Server
Related CVEs — HCL BigFix OSD Bare Metal Server

In the same product, most dangerous first.

CVE-2023-23343LOWHCL BigFix OSD Bare Metal Server version 311.12 or lower is affected by a clickjacking vulnerability.EPSS 0.3%CVE-2023-28006HIGHHCL BigFix OSD Bare Metal Server is affected by a weak cryptographic algorithm.EPSS 0.1%