CVE-2023-45705 - HCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF)

Back Back to CVE browser

HIGH

HCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF)

Published Mar 28, 2024

7.2

HIGH

CVSS 3.1

EPSS 0.37%

Description

An administrative user of WebReports may perform a Server Side Request Forgery (SSRF) exploit through SMTP configuration options.

Affected products

Vendor HCL Software Product BigFix Platform Default
unaffected
- Version
  10.0 - 10.0.10, 11.0.0 - 11.0.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

HCL Software

BigFix Platform

unaffected

Version	Status	Constraints
10.0 - 10.0.10, 11.0.0 - 11.0.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-918

SSRF

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-49994
Advisory
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0111972
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-49994		Advisory
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0111972		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner HCL

Published Mar 28, 2024

Updated Mar 28, 2025

Reserved Oct 10, 2023

Link CVE-2023-45705

CISA Vulnrichment

Updated Mar 28, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-45705

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-45705

ENISA EUVD

Assigner HCL

Published Mar 28, 2024

Updated Mar 28, 2025

Exploited since n/a

Link EUVD-2023-49994

EUVD-2023-49994