low3.3
CVE-2023-37531
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript c…
Impact
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a form field of a webpage by a user with privileged access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Bigfix Platform | from 9.5 before 9.5.24 from 10.0.0 before 10.0.11 Version 11.0.0 |