CVE-2023-37520

HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)

High · published December 21, 2023

CVSS v3.1
7.7
EPSS
0%
Percentile
15.5
In the wild
Unconfirmed
What it is

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data exfiltration. This XSS vulnerability is in the Gather Status Report, which is served by the BigFix Relay.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00251 · 15.5th percentile
Published
2023-12-21T22:13Z
EPSS history
Timeline
  • 21 DEC 22:13Z
    HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)
    cvelistv5