Lucene search
HistoryFeb 29, 2024 - 1:40 a.m.
CVE-2023-37531
cve-2023-37531
cross-site scripting
xss vulnerability
web reports
hcl bigfix platform
execute malicious javascript
form field
privileged access
CVSS3
3.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N
AI Score
4.3
Confidence
High
EPSS
0
Percentile
9.0%
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a form field of a webpage by a user with privileged access.
Related
cvelist
cvelist
vulnrichment
vulnrichment
cve
cve
CVE-2023-37531
2024-02-29 01:40:04
prion
prion
Cross site scripting
2024-02-29 01:40:00
nessus
nessus
CVSS3
3.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N
AI Score
4.3
Confidence
High
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2023-37531