CVE-2023-37531
CVSS 3.1 Score 4.8 of 10 (medium)
Details
Published Feb 29, 2024
Updated: Dec 17, 2024
CWE ID 79
Summary
CVE-2023-37531 is a newly disclosed cross-site scripting (XSS) vulnerability affecting HCL BigFix Platform's Web Reports component. Privileged users can fall victim to this issue, allowing attackers to inject malicious JavaScript code into a webpage's form field. Successful exploitation could result in unauthorized data access or manipulation, potentially leading to significant security risks. Users are advised to apply the necessary patches or updates released by HCL to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Hcltech Bigfix Platform
Affected Vendors
- HCL Technologies Ltd.