CVE-2023-37519: falha de alta gravidade em HCL BigFix Platform
HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.7epss 0.2%
Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. This XSS vulnerability is in the Download Status Report, which is served by the BigFix Server.
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Produtos afetados
HCL Software · HCL BigFix PlatformCVEs relacionadas — HCL BigFix Platform
No mesmo produto, das mais perigosas para as menos.
CVE-2024-42189MEDIUMHCL BigFix Web Reports might be subject to a Denial of Service (DoS) attackEPSS 0.3%CVE-2024-42193LOWHCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attackEPSS 0.3%CVE-2023-37520HIGHHCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)EPSS 0.3%CVE-2024-42200MEDIUMHCL BigFix Web Reports is potentially susceptible to a Stored Cross-Site Scripting (XSS) attackEPSS 0.2%