CVE-2023-28023: Hcltech Bigfix Webui

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A cross site request forgery vulnerability in the BigFix WebUI Software Distribution interface site version 44 and before allows an NMO attacker to access files on server side systems (server machine and all the ones in its network). 

Affected products

• Hcltech Bigfix Webui: up to and including 44

Published 2023-07-18. Last modified 2026-06-17.