Medium · 4.8 CVE-2024-42200 EUVD-2024-54500GHSA-2g48-r5cc-hm38

HCL BigFix Web Reports is potentially susceptible to a Stored Cross-Site Scripting (XSS) attack

Published Apr 15, 2025 · Updated Apr 15, 2025 · Assigned by HCL

Description

HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially weak validation of user input.

Vendor	Product	Affected	Fixed
HCL Software	HCL BigFix Platform	10.0 - 10.0.12; 11.0.0 - 11.0.3	—