CVE-2023-37528: A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attack to exploit an application parameter during execution of the Save Report.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-37528?
CVE-2023-37528 is classified as a cross-site scripting (XSS) vulnerability, which can pose a significant security risk.
How do I fix CVE-2023-37528?
To fix CVE-2023-37528, update the HCL BigFix Platform to a version above 9.5.24 or 10.0.11, or apply any relevant security patches provided by HCL.
Which versions of HCL BigFix Platform are affected by CVE-2023-37528?
CVE-2023-37528 affects HCL BigFix Platform versions from 9.5.0 to 9.5.24, 10.0.0 to 10.0.11, and the specific version 11.0.0.
Can CVE-2023-37528 lead to data theft?
Yes, CVE-2023-37528 can potentially allow attackers to execute malicious scripts in users' browsers, leading to data theft.
What impact does CVE-2023-37528 have on web applications?
CVE-2023-37528 can exploit application parameters during report saving, compromising the integrity and security of web applications using HCL BigFix.