CVE-2023-37508: Hcltech Devops Plan

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

HCL DevOps Plan is potentially susceptible to Cross-Site Scripting (XSS) which could allow an attacker to exploit this vulnerability if certain browser weaknesses are present.

Affected products

• Hcltech Devops Plan: before 3.0.5 (fixed in 3.0.5)

Published 2026-07-21. Last modified 2026-09-26.