CVE-2023-37527

A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

Medium · published February 2, 2024

CVSS v3.1
5.4
EPSS
0%
Percentile
28.1
In the wild
Unconfirmed
What it is

A reflected cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code in the application session or in database, via remote injection, while rendering content in a web page.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00356 · 28.1th percentile
Published
2024-02-02T18:10Z
EPSS history
Timeline
  • 02 FEB 18:10Z
    A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform
    cvelistv5