CVE-2023-37529

Summary

CVE-2023-37529 is a cross-site scripting (XSS) vulnerability affecting HCL BigFix Platform's Web Reports component. An attacker can exploit this issue to inject malicious JavaScript code into a webpage, potentially gaining access to sensitive cookie-stored information. Distinct from CVE-2023-37530, this vulnerability allows unauthorized script execution, posing a significant risk to users.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.