Back

CRITICAL

HCL BigFix OSD Bare Metal Server WebUI is affected by missing or insecure tags

Published Jan 16, 2024

Description

HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower has missing or insecure tags that could allow an attacker to execute a malicious script on the user's browser.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner HCL
Published Jan 16, 2024
Updated Jun 16, 2025
Reserved Jul 6, 2023
CISA Vulnrichment
Updated Feb 13, 2024
NVD
Status Modified
Modified Jun 17, 2026
Red Hat
Severity n/a
Public date n/a
ENISA EUVD
Assigner HCL
Published Jan 16, 2024
Updated Jun 16, 2025
Exploited since n/a
EUVD-2023-41409