Vulnerability Details CVE-2023-37518
HCL BigFix ServiceNow is vulnerable to arbitrary code injection. A malicious authorized attacker could inject arbitrary code and execute within the context of the running user.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.5%
CVSS Severity
CVSS v3 Score 6.4
References
Products affected by CVE-2023-37518
-
cpe:2.3:a:hcltech:bigfix_servicenow_data_flow:-
-
cpe:2.3:a:hcltech:bigfix_servicenow_data_flow:1.2