CVE-2023-28006

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The OSD Bare Metal Server uses a cryptographic algorithm that is no longer considered sufficiently secure.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-327

Affected software

No affected versions have been published.

Timeline

Published
Jun 22, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-280088.1HCL Workload Automation 9.4, 9.5, and 10.1 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remotCVE-2023-280098.1HCL Workload Automation is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could expCVE-2023-28015.3Grafana is an open-source platform for monitoring and observability. Using public dashboards users can query multiple distinct data sourceCVE-2023-280105.3In some configuration scenarios, the Domino server host name can be exposed. This information could be used to target future attacks.CVE-2023-280128.8HCL BigFix Mobile is vulnerable to a command injection attack. An authenticated attacker could run arbitrary shell commands on the WebUI serCVE-2023-280136.1HCL Verse is susceptible to a Reflected Cross Site Scripting (XSS) vulnerability. By tricking a user into entering crafted markup a remote,CVE-2023-280145.4HCL BigFix Mobile is vulnerable to a cross-site scripting attack. An authenticated attacker could inject malicious scripts into the applicatCVE-2023-280155.3The HCL Domino AppDev Pack IAM service is susceptible to a User Account Enumeration vulnerability.   During a failed login attempt a differeCVE-2023-280166.1Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input CVE-2023-280175.4HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code inCVE-2023-280186.5HCL Connections is vulnerable to a denial of service, caused by improper validation on certain requests. Using a specially-crafted request aCVE-2023-280198.8Insufficient validation in Bigfix WebUI API App site version < 14 allows an authenticated WebUI user to issue SQL queries via an unparameter
CVE-2023-28006: High severity, CVSS 7.8 | Vulnix