Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2023-37520

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data exfiltration. This XSS vulnerability is in the Gather Status Report, which is served by the BigFix Relay.

  • Published: Dec 22, 2023
  • Updated: Dec 30, 2023
  • CVE: CVE-2023-37520
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.1
  • AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
hcltech / bigfix_platform 10.0.0 10.0.10
hcltech / bigfix_platform 9.5 9.5.23
hcltech / bigfix_platform 11.0.0 11.0.0.x