278 matches found
CVE-2023-37529 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform
A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage trying to retrieve cookie stored information. This is not the same vulnerability as identified in CVE-2023-37530...
CVE-2023-37529
CVE-2023-37529 refers to a cross-site scripting (XSS) vulnerability in the Web Reports component of the HCL BigFix Platform. The affected component could allow an attacker to inject and execute malicious JavaScript in pages used to retrieve cookie information. The provided documents confirm the v...
CVE-2023-37527
A reflected cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code in the application session or in database, via remote injection, while rendering content in a web page...
CVE-2023-37527
A reflected cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code in the application session or in database, via remote injection, while rendering content in a web page...
Cross site scripting
A reflected cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code in the application session or in database, via remote injection, while rendering content in a web page...
CVE-2023-37527
CVE-2023-37527 describes a reflected cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform . The issue can allow an attacker to execute malicious JavaScript in the application session or database via remote injection while rendering content on a web page. Th...
CVE-2023-37527 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform
A reflected cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code in the application session or in database, via remote injection, while rendering content in a web page...
CVE-2023-37527 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform
A reflected cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code in the application session or in database, via remote injection, while rendering content in a web page...
PT-2024-12633 · Hcl · Hcl Bigfix Platform
Name of the Vulnerable Software and Affected Versions: HCL BigFix Platform affected versions not specified Description: A cross-site scripting XSS issue in the Web Reports component can allow an attacker to execute malicious javascript code into a webpage, potentially accessing stored cookie...
PT-2024-12632 · Hcl · Hcl Bigfix Platform
Name of the Vulnerable Software and Affected Versions: HCL BigFix Platform affected versions not specified Description: A cross-site scripting XSS vulnerability in the Web Reports component can possibly allow an attack to exploit an application parameter during execution of the Save Report...
PT-2024-12634 · Hcl · Hcl Bigfix Platform
Name of the Vulnerable Software and Affected Versions: HCL BigFix Platform affected versions not specified Description: A cross-site scripting XSS issue in the Web Reports component can possibly allow an attacker to execute malicious javascript code into a webpage, attempting to retrieve...
HCL Technologies HCL BigFix Platform Cross-Site Scripting Vulnerability
HCL Technologies HCL BigFix Platform is a suite of endpoint security management platforms from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A cross-site scripting vulnerability exists in the HCL BigFix Platform, which...
PT-2024-12631 · Hcl · Hcl Bigfix Platform
Name of the Vulnerable Software and Affected Versions: HCL BigFix Platform affected versions not specified Description: A reflected cross-site scripting XSS vulnerability in the Web Reports component can possibly allow an attacker to execute malicious javascript code in the application session or...
Fedora 38 : xerces-c (2023-52ba628e03)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-52ba628e03 advisory. Update to 3.2.5, fixing CVE-2018-1311 and CVE-2023-37536 Tenable has extracted the preceding description block directly from the Fedora security...
HCL BigFix Platform Cross-Site Scripting Vulnerability
HCL Technologies HCL BigFix Platform is a suite of endpoint security management platforms from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL BigFix Platform version 9.5.12.68, which...
HCL BigFix Platform Cross-Site Scripting Vulnerability
HCL Technologies HCL BigFix Platform is a suite of endpoint security management platforms from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL BigFix Platform, which stems from a store...
The vulnerability of the Herces library on the C++ platform of the BigFix Platform for collaborative management of IT equipment allows a hacker to execute arbitrary code.
The vulnerability of the Herces library on the C++ platform used by the BigFix Platform for jointly managing IT equipment is due to a numerical overflow. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code by sending a specially crafted HTTP request...
SUSE CVE-2023-37536
An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request...