Unauthenticated Stored XSS Vulnerability in BigFix Server 9.5.12.68: Potential Data Exfiltration via Gather Status Report

CVE-2023-37520 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data exfiltration. This XSS vulnerability is in the Gather Status Report, which is served by the BigFix Relay.

Learn more about our Cis Benchmark Audit For Server Software.