Security Advisory

CVE-2023-37520

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-12-21 22:13:47
Last updated 2024-08-02 17:16:30
Assigner HCL
State PUBLISHED

Description

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data exfiltration. This XSS vulnerability is in the Gather Status Report, which is served by the BigFix Relay.