CVE-2023-37529

A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage trying to retrieve cookie stored information. This is not the same vulnerability as identified in CVE-2023-37530.

Score

CVSS 3.1 5.4 Medium

Status

Modified - psirt@hcl.com

Published

2024-02-29

Last modified

2025-06-03

Weaknesses

CWE-79

Affected products

• Bigfix Platform (Hcl Software)
• Bigfix Platform (Hcltech)

References

• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0110209