CVE-2023-23343

HCL BigFix OSD Bare Metal Server version 311.12 or lower is affected by a clickjacking vulnerability.

Low · published June 22, 2023

CVSS v3.1
2.4
EPSS
0%
Percentile
23.5
In the wild
Unconfirmed
What it is

A clickjacking vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to use transparent or opaque layers to trick a user into clicking on a button or link on another page to perform a redirect to an attacker-controlled domain.

The record
Technical detail
CVSS v3.1
2.4 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00318 · 23.5th percentile
Published
2023-06-22T21:57Z
EPSS history
Timeline
  • 22 JUN 21:57Z
    HCL BigFix OSD Bare Metal Server version 311.12 or lower is affected by a clickjacking vulnerability.
    cvelistv5