Skip to content
OpenAdvisories
Low · 2.0 CVE-2023-45706 EUVD-2023-49995GHSA-38mw-3mfv-34fc

HCL BigFix Platform is susceptible to Cross Site Scripting (XSS) and/or Man in the Middle (MITM) attack

Published Mar 28, 2024 · Updated Nov 7, 2024 · Assigned by HCL

Vendor: HCL Software Product: BigFix Platform

Description

An administrative user of WebReports may perform a Cross Site Scripting (XSS) and/or Man in the Middle (MITM) exploit through SAML configuration.

Affected products

VendorProductAffectedFixed
HCL Software BigFix Platform 9.5 - 9.5.23, 10.0 - 10.0.10, 11.0.0 - 11.0.1 —

References