DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
HCL BigFix: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-02-04
Ein entfernter Angreifer kann mehrere Schwachstellen in HCL BigFix ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten, beliebigen Code auszuführen und vertrauliche Informationen offenzulegen.
01
beschreibt (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-37531US | medium4.8 | — | ||
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a form field… | ||||
| CVE-2023-37530US | medium5.4 | — | ||
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage tr… | ||||
| CVE-2023-37529US | medium5.4 | — | ||
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a webpage tr… | ||||
| CVE-2023-37528US | medium6.1 | — | ||
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attack to exploit an application parameter during execution of… | ||||
| CVE-2024-23553US | medium5.4 | — | ||
A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform exists due to missing a specific http header attribute.
| ||||
| CVE-2023-37527US | medium6.1 | — | ||
A reflected cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code in the… | ||||
| CVE-2023-38545US | critical9.8 | Exploit | ||
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy
handshake.
When curl is asked to pass along the host name to the SOCKS5 proxy to allow
that to resolve the ad… | ||||
| CVE-2024-23552US | — | — | ||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan