Unscored CVE-2019-4301 EUVD-2019-13908GHSA-29wf-fqjv-94f8

BigFix Self-Service Application (SSA) is vulnerable to arbitrary code execution if Javascript code is included in Running Message or Post M…

Published Feb 28, 2020 · Updated Aug 4, 2024 · Assigned by HCL

Vendor: IBM Product: HCL BigFix Self-Service Application (SSA)

Description

BigFix Self-Service Application (SSA) is vulnerable to arbitrary code execution if Javascript code is included in Running Message or Post Message HTML.

Affected products

Vendor	Product	Affected	Fixed
IBM	HCL BigFix Self-Service Application (SSA)	v3.0.0	—

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0076139