CVE-2023-45715: falha de baixa gravidade em HCL Software BigFix Platform
HCL BigFix Platform is susceptible to a Denial of Service attack
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.5epss 0.4%
The console may experience a service interruption when processing file names with invalid characters.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
Produtos afetados
HCL Software · BigFix PlatformCVEs relacionadas — HCL Software BigFix Platform
No mesmo produto, das mais perigosas para as menos.
CVE-2023-37536HIGHHCL BigFix Platform is vulnerable to an integer overflow in xerces-c++ 3.2.3EPSS 1.9%CVE-2021-27762MEDIUMHCL BigFix Platform is affected by misconfigured security-related HTTP headersEPSS 0.7%CVE-2024-23556MEDIUMHCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiationEPSS 0.4%CVE-2023-45705LOWHCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF)EPSS 0.4%CVE-2021-27761MEDIUMHCL BigFix Platform is affected by weak web transport securityEPSS 0.4%CVE-2023-37531LOWA cross-site scripting (XSS) vulnerability affects HCL BigFix PlatformEPSS 0.4%