CVE-2023-45706: Hcltech Bigfix Platform

Medium severity, CVSS 4.0. EPSS: 0.3% chance of exploitation in the next 30 days.

An administrative user of WebReports may perform a Cross Site Scripting (XSS) and/or Man in the Middle (MITM) exploit through SAML configuration.

Affected products

• Hcltech Bigfix Platform: from 9.5, before 9.5.24 (fixed in 9.5.24); from 10.0.0, before 10.0.11 (fixed in 10.0.11); from 11.0.0, up to and including 11.0.1

Published 2024-03-28. Last modified 2026-06-17.