CVE-2023-37528

CVE-2023-37528 is an XSS vulnerability in the Web Reports component of HCL BigFix Platform. The issue could allow exploitation of an application parameter during execution of the Save Report. The CVE is documented across multiple sources (NVD, Nessus plugin for HCL BigFix Server KB0110209) with r...

CVE-2023-37528 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attack to exploit an application parameter during execution of the Save Report...

CVE-2023-37528 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attack to exploit an application parameter during execution of the Save Report...

CVE-2023-37528: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attack to exploit an application parameter during execution of the Save Report...

HCL Technologies HCL BigFix Platform Cross-Site Scripting Vulnerability

HCL Technologies HCL BigFix Platform is a suite of endpoint security management platforms from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A cross-site scripting vulnerability exists in HCL BigFix Platform, which stems...

HCL Technologies HCL Launch Security Breach

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. for handling the most complex deployment processes in DevOps. A security vulnerability exists in HCL DevOps Deploy and HCL Launch UCD that stems from the ability to...

CVE-2024-23550: Exposure of Sensitive Information to an Unauthorized Actor

HCL DevOps Deploy / HCL Launch UCD could disclose sensitive user information when installing the Windows agent...

CVE-2024-23553

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform exists due to missing a specific http header attribute...

CVE-2024-23553

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform exists due to missing a specific http header attribute...

Cross site scripting

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform exists due to missing a specific http header attribute...

CVE-2024-23553

CVE-2024-23553 is an XSS vulnerability in the Web Reports component of HCL BigFix Platform caused by missing a specific HTTP header attribute. Public sources describe it as affecting Web Reports and enabling execution of malicious scripts in the application session or on rendered pages. The provi...

CVE-2024-23553 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform exists due to missing a specific http header attribute...

CVE-2024-23553 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform exists due to missing a specific http header attribute...

CVE-2023-37531

The CVE-2023-37531 entry describes a cross-site scripting (XSS) vulnerability in the Web Reports component of the HCL BigFix Platform. The affected component is the Web Reports feature; the root cause is an XSS flaw that could allow a privileged user to inject malicious JavaScript into a form fie...

CVE-2023-37531 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a form field of a webpage by a user with privileged access...

CVE-2023-37531 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a form field of a webpage by a user with privileged access...

CVE-2023-37530 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage trying to retrieve cookie stored information...

CVE-2023-37530 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage trying to retrieve cookie stored information...

CVE-2023-37530

CVE-2023-37530 is an XSS vulnerability in the Web Reports component of the HCL BigFix Platform. The affected surface allows an attacker to inject and execute malicious JavaScript in a page used to retrieve cookie-stored information. The primary sources describe this as a cross-site scripting issu...

CVE-2023-37529 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform

A cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage trying to retrieve cookie stored information. This is not the same vulnerability as identified in CVE-2023-37530...