Summary
Ein anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in HCL BigFix ausnutzen, um Cross-Site-Scripting-Angriffe zu starten, Daten zu manipulieren und einen Denial-of-Service-Zustand zu verursachen.
Product
BigFix ist eine Lösung zum Erkennen und Verwalten von physischen und virtuellen Endpunkten.
Vulnerabilities 4
-
High 7.7
path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x
path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated in the …
-
Medium 6.1
SummerNote Cross Site Scripting Vulnerability
SummerNote v0.9.1 is vulnerable to Cross Site Scripting (XSS) via the Code View Function.
-
Medium 4.3
Predictable results in nanoid generation when given non-integer values
nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.
-
Unscored —
Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execu…
Revision history
-
#1
Initiale Fassung
References
-
HCL Security Bulletin vom 2025-03-06
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119678