CVE-2023-28020

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

URL redirection in Login page in HCL BigFix WebUI allows malicious user to redirect the client browser to an external site via redirect URL response header.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-601

Affected software

VendorProductVersions
HCL SoftwareHCL BigFix WebUIAll

References

Timeline

Published
Jul 18, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-280217.5The BigFix WebUI uses weak cipher suites.CVE-2023-280226.5HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are nCVE-2023-280236.5A cross site request forgery vulnerability in the BigFix WebUI Software Distribution interface site version 44 and before allows an NMO attaCVE-2023-280254.8Due to this vulnerability, the Master operator could potentially incorporate an SVG tag into HTML, leading to an alert pop-up displaying a cCVE-2023-280266.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentCVE-2023-280276.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentCVE-2023-280286.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentCVE-2023-280296.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentCVE-2023-28036.1The Ultimate Addons for Contact Form 7 WordPress plugin before 3.1.29 does not sanitise and escape a parameter before outputting it back in CVE-2023-280306.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentCVE-2023-280316.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentCVE-2023-280326.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potent