low2.0
CVE-2023-45706
An administrative user of WebReports may perform a Cross Site Scripting (XSS) and/or Man in the Middle (MITM) exploit through SAML configuration.
Impact
An administrative user of WebReports may perform a Cross Site Scripting (XSS) and/or Man in the Middle (MITM) exploit through SAML configuration.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Bigfix Platform | from 9.5 before 9.5.24 from 10.0.0 before 10.0.11 from 11.0.0 through 11.0.1 |