CVE-2019-4301

BigFix Self-Service Application (SSA) is vulnerable to arbitrary code execution if Javascript code is included in Running Message or Post Message HTML.

Score

CVSS 3.1 8.4 High

Status

Modified - psirt@hcl.com

Published

2020-02-28

Last modified

2024-08-04

Affected products

• Self-service Application (Hcltech)
• Hcl Bigfix Self-service Application Ssa (Ibm Corporation)

References

• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0076139