CVE-2023-28008

🗓️ 26 Apr 2023 19:24:37Reported by HCLType

HCL Workload Automation 9.4, 9.5, and 10.1 XML External Entity Injection (XXE) vulnerability

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-28008	27 Apr 202300:25	–	circl
CNNVD	HCL Technologies Workload Automation 代码问题漏洞	26 Apr 202300:00	–	cnnvd
Cvelist	CVE-2023-28008 HCL Workload Automation is vulnerable to XML External Entity (XXE) Injection	26 Apr 202319:24	–	cvelist
EUVD	EUVD-2023-31733	3 Oct 202520:07	–	euvd
NVD	CVE-2023-28008	26 Apr 202320:15	–	nvd
OSV	CVE-2023-28008	26 Apr 202320:15	–	osv
Prion	Xxe	26 Apr 202320:15	–	prion
Positive Technologies	PT-2023-21475 · Hcl · Hcl Workload Automation	26 Apr 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-28008	23 May 202504:51	–	redhatcve
Vulnrichment	CVE-2023-28008 HCL Workload Automation is vulnerable to XML External Entity (XXE) Injection	26 Apr 202319:24	–	vulnrichment

NVD

Node

hcltech workload_automationMatch9.4.0-

hcltech workload_automationMatch9.4.0fix_pack_3

hcltech workload_automationMatch9.4.0fix_pack_4

hcltech workload_automationMatch9.4.0fix_pack_5

hcltech workload_automationMatch9.4.0fix_pack_6

hcltech workload_automationMatch9.4.0fix_pack_7

hcltech workload_automationMatch9.5.0-

hcltech workload_automationMatch9.5.0fix_pack_1

hcltech workload_automationMatch9.5.0fix_pack_2

hcltech workload_automationMatch9.5.0fix_pack_3

hcltech workload_automationMatch9.5.0fix_pack_4

hcltech workload_automationMatch9.5.0fix_pack_5

hcltech workload_automationMatch9.5.0fix_pack_6

hcltech workload_automationMatch10.1.0-

[
  {
    "defaultStatus": "unaffected",
    "product": "Workload Automation",
    "vendor": "HCL Software",
    "versions": [
      {
        "status": "affected",
        "version": "<=9.5.0.6, 10.1.0.0"
      }
    ]
  }
]

Source	Link
support	www.support.hcltechsw.com/csm

17 Jun 2026 05:46Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.1 - 8.1

EPSS0.00821

SSVC

CWE-611