Lucene search
HistoryJan 16, 2024 - 4:15 p.m.
CVE-2023-37522
hcl bigfix bare osd metal server
webui
version 311.19
missing tags
insecure
attacker execute script
malicious script
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
High
EPSS
0.001
Percentile
39.1%
HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower has missing or insecure tags that could allow an attacker to execute a malicious script on the user’s browser.
Affected configurations
Node
hcltechswbigfix_bare_osd_metal_server_webuiRange<311.28
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hcltechsw | bigfix_bare_osd_metal_server_webui | * | cpe:2.3:a:hcltechsw:bigfix_bare_osd_metal_server_webui:*:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2024-01-16 16:15:00
cve
cve
CVE-2023-37522
2024-01-16 16:15:11
cvelist
cvelist
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
High
EPSS
0.001
Percentile
39.1%
Related for NVD:CVE-2023-37522