Approved changes feed: RSS · Atom

cpe:2.3:a:hcl_software:hcl_bigfix_webui_software_distribution:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847)
ProductHcl Bigfix Webui Software Distribution (2c1b9649-e911-59aa-be79-5a4903c6ca23)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-28023 vulnerable 2026-06-08 05:57:42.860823 HCL BigFix WebUI Software Distribution is affected by a cross site server request forgery vulnerability
MEDIUM (4.9)
A cross site request forgery vulnerability in the BigFix WebUI Software Distribution interface site version 44 and before allows an NMO attacker to access files on server side systems (server machine and all the ones in its network). 
Published: 2023-07-18T19:07:40.553Z
Updated: 2024-10-21T14:36:00.258Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.