CVE-2023-37528

A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attack to exploit an application parameter during execution of the Save Report.

Score

CVSS 3.1 6.5 Medium

Status

Modified - psirt@hcl.com

Published

2024-02-03

Last modified

2025-06-03

Weaknesses

CWE-79

Affected products

• Bigfix Platform (Hcl Software)
• Bigfix Platform (Hcltech)

References

• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0110209