CVE-2023-37531
EUVD-2023-4141829.02.2024, 01:40
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a form field of a webpage by a user with privileged access.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| hcltech | bigfix_platform | 9.5 ≤ 𝑥 < 9.5.24 |
| hcltech | bigfix_platform | 10.0.0 ≤ 𝑥 < 10.0.11 |
| hcltech | bigfix_platform | 11.0.0 |
𝑥
= Vulnerable software versions