CVE-2023-45705: falha de baixa gravidade em HCL Software BigFix Platform
HCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF)
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.5epss 0.4%
An administrative user of WebReports may perform a Server Side Request Forgery (SSRF) exploit through SMTP configuration options.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
Produtos afetados
HCL Software · BigFix PlatformCVEs relacionadas — HCL Software BigFix Platform
No mesmo produto, das mais perigosas para as menos.
CVE-2023-37536HIGHHCL BigFix Platform is vulnerable to an integer overflow in xerces-c++ 3.2.3EPSS 1.9%CVE-2021-27762MEDIUMHCL BigFix Platform is affected by misconfigured security-related HTTP headersEPSS 0.7%CVE-2023-45715LOWHCL BigFix Platform is susceptible to a Denial of Service attackEPSS 0.4%CVE-2024-23556MEDIUMHCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiationEPSS 0.4%CVE-2021-27761MEDIUMHCL BigFix Platform is affected by weak web transport securityEPSS 0.4%CVE-2023-37531LOWA cross-site scripting (XSS) vulnerability affects HCL BigFix PlatformEPSS 0.4%