CVE-2019-4301: Hcltech Self-Service Application

High severity, CVSS 8.4. EPSS: 1.2% chance of exploitation in the next 30 days.

BigFix Self-Service Application (SSA) is vulnerable to arbitrary code execution if Javascript code is included in Running Message or Post Message HTML.

Affected products

• Hcltech Self-Service Application: version 3.0.0 only

Published 2020-02-28. Last modified 2026-06-17.