Lucene search
+L

1480 matches found

OSV
OSV
added 2023/12/21 11:15 p.m.7 views

CVE-2023-37520

Unauthenticated Stored Cross-Site Scripting XSS vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data exfiltration. This XSS vulnerability is in the Gather Status Report, which is served by the BigFix Relay...

6.1CVSS5.8AI score0.00249EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/21 11:15 p.m.24 views

CVE-2023-37520

Unauthenticated Stored Cross-Site Scripting XSS vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data exfiltration. This XSS vulnerability is in the Gather Status Report, which is served by the BigFix Relay...

7.7CVSS0.00249EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/21 11:15 p.m.29 views

Cross site scripting

Unauthenticated Stored Cross-Site Scripting XSS vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data exfiltration. This XSS vulnerability is in the Gather Status Report, which is served by the BigFix Relay...

5.8CVSS5.5AI score0.00249EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2023/12/21 10:15 p.m.19 views

CVE-2023-37519

Unauthenticated Stored Cross-Site Scripting XSS vulnerability. This XSS vulnerability is in the Download Status Report, which is served by the BigFix Server...

7.7CVSS0.00249EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/21 10:15 p.m.5 views

CVE-2023-37519

Unauthenticated Stored Cross-Site Scripting XSS vulnerability. This XSS vulnerability is in the Download Status Report, which is served by the BigFix Server...

6.1CVSS5.8AI score0.00249EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/21 10:15 p.m.20 views

Cross site scripting

Unauthenticated Stored Cross-Site Scripting XSS vulnerability. This XSS vulnerability is in the Download Status Report, which is served by the BigFix Server...

5.8CVSS5.3AI score0.00249EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/21 10:13 p.m.32 views

CVE-2023-37520 HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)

Unauthenticated Stored Cross-Site Scripting XSS vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data exfiltration. This XSS vulnerability is in the Gather Status Report, which is served by the BigFix Relay...

7.7CVSS6.7AI score0.00249EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/21 10:13 p.m.48 views

CVE-2023-37520

CVE-2023-37520 is an unauthenticated stored XSS affecting HCL BigFix Server 9.5.12.68, located in the Gather Status Report served by the BigFix Relay. The vulnerability could enable data exfiltration. Connected documents confirm the affected product/version and location; exploitation details are ...

7.7CVSS5.9AI score0.00249EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/21 9:44 p.m.14 views

CVE-2023-37519 HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)

Unauthenticated Stored Cross-Site Scripting XSS vulnerability. This XSS vulnerability is in the Download Status Report, which is served by the BigFix Server...

7.7CVSS6.5AI score0.00249EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/21 9:44 p.m.73 views

CVE-2023-37519

CVE-2023-37519 is an Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability affecting HCL BigFix Platform/BigFix Server, specifically in the Download Status Report. Connected sources indicate affected product versions include HCL BigFix Platform 10.0–10.0.9 and 9.5–9.5.22. The vulnerabil...

7.7CVSS5.8AI score0.00249EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/21 9:44 p.m.33 views

CVE-2023-37519 HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)

Unauthenticated Stored Cross-Site Scripting XSS vulnerability. This XSS vulnerability is in the Download Status Report, which is served by the BigFix Server...

7.7CVSS6.5AI score0.00249EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/12/21 12:0 a.m.7 views

PT-2023-26008 · Ibm · Bigfix Server +1

Name of the Vulnerable Software and Affected Versions: BigFix Server version 9.5.12.68 Description: An Unauthenticated Stored Cross-Site Scripting XSS issue has been identified, allowing for potential data exfiltration. This issue is located in the Gather Status Report, which is served by the...

7.7CVSS5.9AI score0.00249EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/12/21 12:0 a.m.11 views

PT-2023-26006 · Ibm · Bigfix Server

Name of the Vulnerable Software and Affected Versions: BigFix Server affected versions not specified Description: The issue is an Unauthenticated Stored Cross-Site Scripting XSS vulnerability. This vulnerability is located in the Download Status Report, which is served by the BigFix Server...

7.7CVSS5.8AI score0.00249EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/12/21 12:0 a.m.6 views

HCL Technologies BigFix Mobile/Modern Client Management Cross-Site Scripting Vulnerability

HCL Technologies BigFix Mobile/Modern Client Management is a mobile device management software client from HCL Technologies. A security vulnerability exists in HCL Technologies BigFix Mobile/Modern Client Management v3.1 and prior versions, which stems from a stored cross-site scripting XSS...

6.6CVSS5.8AI score0.00313EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/12/21 12:0 a.m.6 views

HCL BigFix Platform Cross-Site Scripting Vulnerability

HCL Technologies HCL BigFix Platform is a suite of endpoint security management platforms from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL BigFix Platform version 9.5.12.68, which...

7.7CVSS5.8AI score0.00249EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/12/21 12:0 a.m.6 views

HCL BigFix Platform Cross-Site Scripting Vulnerability

HCL Technologies HCL BigFix Platform is a suite of endpoint security management platforms from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL BigFix Platform, which stems from a store...

7.7CVSS5.8AI score0.00249EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2023/12/13 9:25 a.m.32 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM License Metric Tool v9.

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 used by IBM License Metric Tool. These issues were disclosed as part of the IBM Java SDK updates in Oct 2023. Vulnerability Details CVEID:CVE-2023-22081 DESCRIPTION: An unspecified vulnerability in Java SE...

5.9CVSS6.2AI score0.014EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/21 12:0 a.m.8 views

The vulnerability of the Herces library on the C++ platform of the BigFix Platform for collaborative management of IT equipment allows a hacker to execute arbitrary code.

The vulnerability of the Herces library on the C++ platform used by the BigFix Platform for jointly managing IT equipment is due to a numerical overflow. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code by sending a specially crafted HTTP request...

8.2CVSS7.4AI score0.01381EPSS
SaveExploits0References9Affected Software7
CNVD
CNVD
added 2023/10/13 12:0 a.m.31 views

HCL Technologies BigFix Insights for Vulnerability Remediation (IVR) Weak Encryption Vulnerability

HCL Technologies BigFix Insights is a U.S.-based company that accelerates risk identification and decision making through elevated views of endpoint queue data, rich reporting, and integration with existing business intelligence tools. HCL Technologies BigFix Insights for Vulnerability Remediatio...

8.2CVSS6.4AI score0.00329EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2023/10/12 2:35 p.m.3 views

SUSE CVE-2023-37536

An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request...

8.2CVSS7.2AI score0.01381EPSS
SaveExploits0References10
Rows per page
Query Builder