CVE-2023-28014 HCL BigFix Mobile can be affected by a cross-site scripting (XSS) vulnerability

HCL BigFix Mobile is vulnerable to a cross-site scripting attack. An authenticated attacker could inject malicious scripts into the application...

CVE-2023-28014 HCL BigFix Mobile can be affected by a cross-site scripting (XSS) vulnerability

HCL BigFix Mobile is vulnerable to a cross-site scripting attack. An authenticated attacker could inject malicious scripts into the application...

CVE-2023-28013

HCL Verse is susceptible to a Reflected Cross Site Scripting XSS vulnerability. By tricking a user into entering crafted markup a remote, unauthenticated attacker could execute script in a victim's web browser to perform operations as the victim and/or steal the victim's cookies, session tokens, ...

CVE-2023-28013

HCL Verse is susceptible to a Reflected Cross Site Scripting XSS vulnerability. By tricking a user into entering crafted markup a remote, unauthenticated attacker could execute script in a victim's web browser to perform operations as the victim and/or steal the victim's cookies, session tokens, ...

Cross site scripting

HCL Verse is susceptible to a Reflected Cross Site Scripting XSS vulnerability. By tricking a user into entering crafted markup a remote, unauthenticated attacker could execute script in a victim's web browser to perform operations as the victim and/or steal the victim's cookies, session tokens, ...

CVE-2023-28012 HCL BigFix Mobile can be affected by a command injection vulnerability

HCL BigFix Mobile is vulnerable to a command injection attack. An authenticated attacker could run arbitrary shell commands on the WebUI server...

CVE-2023-28012

CVE-2023-28012 affects HCL BigFix Mobile WebUI server. The vulnerability is a command injection flaw where input is not properly filtered, allowing an authenticated attacker to execute arbitrary shell commands on the WebUI server. Reported impact includes high confidentiality, integrity, and avai...

CVE-2023-28012 HCL BigFix Mobile can be affected by a command injection vulnerability

HCL BigFix Mobile is vulnerable to a command injection attack. An authenticated attacker could run arbitrary shell commands on the WebUI server...

CVE-2023-28013 HCL Verse is susceptible to a Reflected Cross-Site Scripting (XSS) Vulnerability

HCL Verse is susceptible to a Reflected Cross Site Scripting XSS vulnerability. By tricking a user into entering crafted markup a remote, unauthenticated attacker could execute script in a victim's web browser to perform operations as the victim and/or steal the victim's cookies, session tokens, ...

CVE-2023-28013

CVE-2023-28013 affects HCL Verse (web application). The provided documents describe a Reflected Cross Site Scripting (XSS) vulnerability where a remote, unauthenticated attacker could lure a user into submitting crafted markup, enabling execution of script in the victim’s browser and potential ex...

CVE-2023-28013 HCL Verse is susceptible to a Reflected Cross-Site Scripting (XSS) Vulnerability

HCL Verse is susceptible to a Reflected Cross Site Scripting XSS vulnerability. By tricking a user into entering crafted markup a remote, unauthenticated attacker could execute script in a victim's web browser to perform operations as the victim and/or steal the victim's cookies, session tokens, ...

PT-2023-21480 · Hcl · Hcl Bigfix Mobile

Name of the Vulnerable Software and Affected Versions: HCL BigFix Mobile affected versions not specified Description: The issue allows an authenticated attacker to inject malicious scripts into the application through a cross-site scripting attack. Recommendations: At the moment, there is no...

PT-2023-21478 · Hcl · Hcl Bigfix Mobile

Name of the Vulnerable Software and Affected Versions: HCL BigFix Mobile affected versions not specified Description: The issue allows an authenticated attacker to perform a command injection attack, enabling them to run arbitrary shell commands on the WebUI server. Recommendations: At the moment...

CVE-2023-28020

URL redirection in Login page in HCL BigFix WebUI allows malicious user to redirect the client browser to an external site via redirect URL response header...

Xxe

URL redirection in Login page in HCL BigFix WebUI allows malicious user to redirect the client browser to an external site via redirect URL response header...

CVE-2023-28023 HCL BigFix WebUI Software Distribution is affected by a cross site server request forgery vulnerability

A cross site request forgery vulnerability in the BigFix WebUI Software Distribution interface site version 44 and before allows an NMO attacker to access files on server side systems server machine and all the ones in its network...

CVE-2023-28023 HCL BigFix WebUI Software Distribution is affected by a cross site server request forgery vulnerability

A cross site request forgery vulnerability in the BigFix WebUI Software Distribution interface site version 44 and before allows an NMO attacker to access files on server side systems server machine and all the ones in its network...

CVE-2023-28020 URL redirection affects BigFix WebUI

URL redirection in Login page in HCL BigFix WebUI allows malicious user to redirect the client browser to an external site via redirect URL response header...

CVE-2023-28020 URL redirection affects BigFix WebUI

URL redirection in Login page in HCL BigFix WebUI allows malicious user to redirect the client browser to an external site via redirect URL response header...

CVE-2023-28020

CVE-2023-28020 concerns a URL redirection in the login page of HCL BigFix WebUI that allows a malicious user to redirect a client browser to an external site via a redirect URL response header. The connected PT-2023-21486 entry explicitly notes the vulnerable software is HCL BigFix WebUI and desc...