Medium severity6.4NVD Advisory· Published Jan 30, 2024· Updated Jun 17, 2026
CVE-2023-37518
CVE-2023-37518
Description
HCL BigFix ServiceNow is vulnerable to arbitrary code injection. A malicious authorized attacker could inject arbitrary code and execute within the context of the running user.
Affected products
3(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=1.2
- cpe:2.3:a:hcltech:bigfix_servicenow_data_flow:*:*:*:*:*:*:*:*Range: <1.3
Patches
Vulnerability mechanics
References
1- support.hcltechsw.com/csmnvdVendor Advisory
News mentions
0No linked articles in our index yet.