CVE-2023-37520: falha de alta gravidade em HCL BigFix Platform
HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.7epss 0.3%
Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data exfiltration. This XSS vulnerability is in the Gather Status Report, which is served by the BigFix Relay.
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Produtos afetados
HCL Software · HCL BigFix PlatformCVEs relacionadas — HCL BigFix Platform
No mesmo produto, das mais perigosas para as menos.
CVE-2024-42189MEDIUMHCL BigFix Web Reports might be subject to a Denial of Service (DoS) attackEPSS 0.3%CVE-2024-42193LOWHCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attackEPSS 0.3%CVE-2023-37519HIGHHCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)EPSS 0.2%CVE-2024-42200MEDIUMHCL BigFix Web Reports is potentially susceptible to a Stored Cross-Site Scripting (XSS) attackEPSS 0.2%