CVE-2023-28019

Insufficient validation in Bigfix WebUI API App site version < 14 allows an authenticated WebUI user to issue SQL queries via an unparameterized SQL query.

Score

CVSS 3.1 8.8 High

Status

Modified - psirt@hcl.com

Published

2023-07-18

Last modified

2024-10-21

Weaknesses

CWE-89

Affected products

• Hcl Bigfix Webui Api (Hcl Software)
• Bigfix Webui (Hcltech)

References

• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106123