Orta CVSS 6.1
CVE-2025-0276: Bigfix Mobile: siteler arası betik çalıştırma (XSS)
Açıklama (NVD)
HCL BigFix Modern Client Management (MCM) 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content.
Özet bilgiler
- Ürün
- Hcltech Bigfix Mobile
- CVSS v3.1
- 6.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - EPSS
- %0,31 (yüzdelik 23)
- CWE
- CWE-79
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| hcltech-bigfix-mobile | — | 3.3 | — |
| hcltech-bigfix-modern-client-management | — | — | 3.4 |