CVE-2023-28023: medium-severity vulnerability in HCL BigFix WebUI Software Distribution
HCL BigFix WebUI Software Distribution is affected by a cross site server request forgery vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.9epss 0.2%
A cross site request forgery vulnerability in the BigFix WebUI Software Distribution interface site version 44 and before allows an NMO attacker to access files on server side systems (server machine and all the ones in its network).
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
Affected products
HCL Software · HCL BigFix WebUI Software Distribution