IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
4.8Medium

CVE-2024-42200HCL BigFix Web Reports is potentially susceptible to a Stored Cross-Site Scripting (XSS) attack

HCL Software HCL BigFix Platform Published: (1 year ago)

Description

HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially weak validation of user input.

Weakness (CWE): CWE-79

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
HCL Software HCL BigFix Platform 10.0 - 10.0.12; 11.0.0 - 11.0.3
hcltech bigfix platform 10.0.0 – < 10.0.13

References and patches

CPE matches (NVD) (2)
  • cpe:2.3:a:hcltech:bigfix_platform:*:*:*:*:*:*:*:* ≥ 10.0.0 < 10.0.13
  • cpe:2.3:a:hcltech:bigfix_platform:*:*:*:*:*:*:*:* ≥ 11.0.0 < 11.0.4