CVE-2023-37508

MediumCVSS 6.1/10Last modified Sep 26, 2026

Description

HCL DevOps Plan is potentially susceptible to Cross-Site Scripting (XSS) which could allow an attacker to exploit this vulnerability if certain browser weaknesses are present.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jul 21, 2026
Last modified
Sep 26, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-37519.8A vulnerability was found in Super Store Finder 3.6. It has been declared as critical. Affected by this vulnerability is an unknown functionCVE-2023-375114.3If certain App Transport Security (ATS) settings are set in a certain manner, insecure loading of web content can be achieved.CVE-2023-375125.5When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred which may reveal sensitCVE-2023-375135.5When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred which may reveal sensitCVE-2023-375163.2Missing "no cache" headers in HCL Leap permits user directory information to be cached.CVE-2023-375177.5Missing "no cache" headers in HCL Leap permits sensitive data to be cached.CVE-2023-375188.8HCL BigFix ServiceNow is vulnerable to arbitrary code injection. A malicious authorized attacker could inject arbitrary code and execute wiCVE-2023-375196.1Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. This XSS vulnerability is in the Download Status Report, which is served byCVE-2023-37526.1A vulnerability was found in Creativeitem Academy LMS 5.15. It has been rated as problematic. Affected by this issue is some unknown functioCVE-2023-375206.1Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data eCVE-2023-375215.3HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower can sometimes include sensitive information in a query string which could allCVE-2023-375229.8HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower has missing or insecure tags that could allow an attacker to execute a malici