CVE-2023-37520
21.12.2023, 23:15
UnauthenticatedStored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data exfiltration. This XSS vulnerability is in the Gather Status Report, which is served by the BigFix Relay.
| Vendor | Product | Version |
|---|---|---|
| hcltech | bigfix_platform | 9.5 ≤ 𝑥 < 9.5.23 |
| hcltech | bigfix_platform | 10.0.0 ≤ 𝑥 < 10.0.10 |
| hcltech | bigfix_platform | 11.0.0 |
𝑥
= Vulnerable software versions