Skip to content
OpenAdvisories
Medium WID-SEC-2023-1899 3 CVEs

HCL BigFix: Schwachstelle ermöglicht Cross-Site Scripting

Published Jul 26, 2023 · Updated Jul 26, 2023 · de-DE

Vendor: HCL Software Product: BigFix < 3.1 Platform: Linux Platform: macOS Platform: Windows

Summary

Ein lokaler Angreifer kann eine Schwachstelle in HCL BigFix ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

BigFix ist eine Lösung zum Erkennen und Verwalten von physischen und virtuellen Endpunkten.

Vulnerabilities 3

  • Medium 6.6
    CVE-2023-28014

    HCL BigFix Mobile can be affected by a cross-site scripting (XSS) vulnerability

    HCL BigFix Mobile is vulnerable to a cross-site scripting attack. An authenticated attacker could inject malicious scripts into the application.

    HCL Software HCL BigFix Mobile
  • Medium 6.5
    CVE-2023-28013

    HCL Verse is susceptible to a Reflected Cross-Site Scripting (XSS) Vulnerability

    HCL Verse is susceptible to a Reflected Cross Site Scripting (XSS) vulnerability. By tricking a user into entering crafted markup a remote, unauthenticated attacker could execute script in a victim's web browser to perform operations as the victim and/or stea…

    HCL Software HCL Verse
  • Medium 5.4
    CVE-2023-28012

    HCL BigFix Mobile can be affected by a command injection vulnerability

    HCL BigFix Mobile is vulnerable to a command injection attack. An authenticated attacker could run arbitrary shell commands on the WebUI server.

    HCL Software HCL BigFix Mobile

Revision history

  1. #1

    Initiale Fassung

References