CVE-2023-37536

🗓️ 11 Oct 2023 06:46:01Reported by HCLType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 124 Views

An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound acces

Reporter	Title	Published	Views	Family All 68
Tenable Nessus	Amazon Linux 2 : xerces-c (ALAS-2023-2327)	2 Nov 202300:00	–	nessus
Tenable Nessus	Debian dla-3704 : libxerces-c-dev - security update	22 Jan 202500:00	–	nessus
Tenable Nessus	Fedora 37 : mingw-xerces-c (2023-1332ed94a7)	23 Oct 202300:00	–	nessus
Tenable Nessus	Fedora 38 : xerces-c (2023-52ba628e03)	30 Dec 202300:00	–	nessus
Tenable Nessus	Fedora 39 : xerces-c (2023-817ecc703f)	30 Dec 202300:00	–	nessus
Tenable Nessus	Oracle Linux 7 : xerces-c (ELSA-2024-8795)	22 Nov 202400:00	–	nessus
Tenable Nessus	Oracle Access Manager (Apr 2024 CPU)	19 Apr 202400:00	–	nessus
Tenable Nessus	Oracle Essbase Multiple Vulnerabilities (July 2024 CPU)	19 Jul 202400:00	–	nessus
Tenable Nessus	RHEL 7 : xerces-c (RHSA-2024:8795)	6 Nov 202400:00	–	nessus
Tenable Nessus	RHEL 6 : xerces-c (Unpatched Vulnerability)	11 May 202400:00	–	nessus

NVD

Node

apache xerces-c++Match3.2.3

hcltech bigfix_platformRange9.0.0–9.5.23

hcltech bigfix_platformRange10.0.0–10.0.10

Node

fedoraproject fedoraMatch37

[
  {
    "defaultStatus": "unaffected",
    "product": "BigFix Platform",
    "vendor": "HCL Software",
    "versions": [
      {
        "status": "affected",
        "version": "9.5 - 9.5.22, 10 - 10.0.9"
      }
    ]
  }
]

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2023/12/msg00027.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/AJYZUBGPVWJ7LEHRCMB5XVADQBNGURXD/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/DAOSSJ72CUJ535VRWTCVQKUYT2LYR3OM/
support	www.support.hcltechsw.com/csm
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/7A6WWL4SWKAVYK6VK5YN7KZP4MZWC7IY/

17 Jun 2026 06:08Current

8.3High risk

Vulners AI Score8.3

CVSS 3.18.2 - 8.8

EPSS0.01381

SSVC