| Package | Affected versions | Patched versions |
|---|---|---|
| bigfix platform | = 11.0.0≥ 10.0.0, < 10.0.11≥ 9.5, < 9.5.24 | 10.0.119.5.24 |
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage trying to retrieve cookie stored information. This is not the same vulnerability as identified in CVE-2023-37530.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free