CVE-2023-28009

CVE-2023-28009 affects HCL Workload Automation. The vulnerability is an XML External Entity (XXE) injection in the XML processing path. Impact stated in sources: potential exposure of sensitive information and/or memory/resource exhaustion. Exploitation details are not provided in the documents; ...

CVE-2023-28008

CVE-2023-28008 affects HCL Workload Automation versions 9.4, 9.5, and 10.1 where XML data is processed. The root cause is XML External Entity (XXE) injection in the XML processing path, enabling a remote attacker to access sensitive information or exhaust memory resources as described across mult...