low3.0
CVE-2023-37530
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript c…
Impact
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage trying to retrieve cookie stored information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Bigfix Platform | from 9.5 before 9.5.24 from 10.0.0 before 10.0.11 Version 11.0.0 |