low3.0
CVE-2024-23553
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform exists due to missing a specific http header attribute.
Impact
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform exists due to missing a specific http header attribute.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Bigfix Platform | from 9.5 before 9.5.24 from 10.0.0 before 10.0.11 Version 11.0.0 |