Lucene search
+L

397 matches found

Cvelist
Cvelist
added 2024/03/28 2:19 p.m.19 views

CVE-2023-45706 HCL BigFix Platform is susceptible to Cross Site Scripting (XSS) and/or Man in the Middle (MITM) attack

An administrative user of WebReports may perform a Cross Site Scripting XSS and/or Man in the Middle MITM exploit through SAML configuration...

2CVSS3.9AI score0.0026EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/28 2:11 p.m.19 views

CVE-2023-45705 HCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF)

An administrative user of WebReports may perform a Server Side Request Forgery SSRF exploit through SMTP configuration options...

3.5CVSS7AI score0.00371EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/28 2:11 p.m.38 views

CVE-2023-45705 HCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF)

An administrative user of WebReports may perform a Server Side Request Forgery SSRF exploit through SMTP configuration options...

3.5CVSS4.5AI score0.00371EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/28 12:0 a.m.9 views

HCL BigFix Platform 代码问题漏洞

HCL Technologies HCL BigFix Platform is a suite of endpoint security management platforms from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in the HCL BigFix Platform that originates from ...

7.2CVSS6.8AI score0.00371EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/28 12:0 a.m.8 views

HCL BigFix Platform 安全漏洞

HCL Technologies HCL BigFix Platform is a suite of endpoint security management platforms from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in the HCL BigFix Platform that originates from ...

4CVSS6.1AI score0.0026EPSS
SaveExploits0References2
NVD
NVD
added 2024/02/29 1:40 a.m.85 views

CVE-2023-37531

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a form field of a webpage by a user with privileged access...

4.8CVSS4.3AI score0.00359EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/29 1:40 a.m.26 views

CVE-2023-37530

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage trying to retrieve cookie stored information...

5.4CVSS4.2AI score0.00335EPSS
SaveExploits0References1
OSV
OSV
added 2024/02/29 1:40 a.m.6 views

CVE-2023-37531

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a form field of a webpage by a user with privileged access...

4.8CVSS5.8AI score0.00359EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/29 1:40 a.m.21 views

CVE-2023-37529

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage trying to retrieve cookie stored information. This is not the same vulnerability as identified in CVE-2023-37530...

5.4CVSS4.1AI score0.00335EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/29 1:40 a.m.36 views

Cross site scripting

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage trying to retrieve cookie stored information...

2.1CVSS5.7AI score0.00335EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/29 1:40 a.m.34 views

Cross site scripting

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a form field of a webpage by a user with privileged access...

3.2CVSS6.2AI score0.00359EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/29 1:40 a.m.40 views

Cross site scripting

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage trying to retrieve cookie stored information. This is not the same vulnerability as identified in CVE-2023-37530...

2.1CVSS5.7AI score0.00335EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/02/29 12:0 a.m.7 views

HCL Technologies HCL BigFix Platform Cross-Site Scripting Vulnerability

HCL Technologies HCL BigFix Platform is a suite of endpoint security management platforms from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL BigFix Platform that stems from the...

4.8CVSS5.9AI score0.00359EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/02/08 12:0 a.m.12 views

HCL BigFix Server Installed (Windows)

Binary data hclbigfixserverwininstalled.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/02/08 12:0 a.m.54 views

HCL BigFix Server 9.5.x < 9.5.24 / 10.0.x < 10.0.10 / 11.0.x < 11.0.1 Multiple Vulnerabilities (KB0110209)

The version of HCL BigFix Server installed on the remote host is 9.5.x prior to 9.5.24, 10.0.x prior to 10.0.10 or 11.x prior to 11.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the KB0110209 advisory. - Heap-based buffer overflow vulnerability in the SOCKS5 proxy...

9.8CVSS8.1AI score0.78483EPSS
SaveExploits6References9
OSV
OSV
added 2024/02/03 6:15 a.m.8 views

CVE-2023-37528

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attack to exploit an application parameter during execution of the Save Report...

6.1CVSS5.8AI score0.00337EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/03 6:15 a.m.23 views

CVE-2023-37528

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attack to exploit an application parameter during execution of the Save Report...

6.5CVSS6.5AI score0.00337EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/03 6:15 a.m.31 views

Cross site scripting

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attack to exploit an application parameter during execution of the Save Report...

5.8CVSS6.1AI score0.00337EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/02/03 5:27 a.m.31 views

CVE-2023-37528 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attack to exploit an application parameter during execution of the Save Report...

6.5CVSS6.8AI score0.00337EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/02/03 5:27 a.m.24 views

CVE-2023-37528 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attack to exploit an application parameter during execution of the Save Report...

6.5CVSS5.9AI score0.00337EPSS
SaveExploits0References1
Rows per page
Query Builder