CVE-2023-37527
Assigner: HCL
Published: 2024-02-02T18:10:04.303Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: BigFix Platform
vendor: HCL Software
versions: status: affected
version: 9.5 - 9.5.23, 10 - 10.0.10
datePublic: 2024-02-02T14:10:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: <span style="background-color: rgb(255, 255, 255);">A reflected c</span><span style="background-color: rgb(255, 255, 255);">ross-site scripting (XSS) vulnerabil</span><span style="background-color: rgb(255, 255, 255);">ity in the <span style="background-color: rgb(255, 255, 255);">Web Reports component of <span style="background-color: rgb(255, 255, 255);">HCL BigFix Platform</span></span> can possibly allow an attacker to execute malicious javascript code in the application session or in database, via remote injection, while rendering content in a web page. </span><br>
value: A reflected cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code in the application session or in database, via remote injection, while rendering content in a web page. 

metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
source: discovery: UNKNOWN
title: A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform
x_generator: engine: Vulnogram 0.1.0-dev