CVE-2023-23343: Hcltech Bigfix Osd Bare Metal Server

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

A clickjacking vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to use transparent or opaque layers to trick a user into clicking on a button or link on another page to perform a redirect to an attacker-controlled domain.

Affected products

• Hcltech Bigfix Osd Bare Metal Server: up to and including 311.12

Published 2023-06-22. Last modified 2026-06-17.