CVE-2023-37527

Summary

CVE-2023-37527 is a reflected cross-site scripting (XSS) vulnerability identified in HCL BigFix Platform's Web Reports component. This issue allows an attacker to inject and execute malicious JavaScript code remotely, either in the application session or in the database, while rendering content in a web page. Successful exploitation could lead to unauthorized data access, manipulation, or theft, making it a significant security concern for users of this software.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.