CVE-2023-37508

MediumCVSS 6.1

Published: 21/07/2026(UTC)Updated: 29/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

3th percentile - higher than 3% of all known CVEs

Summary

HCL DevOps Plan is potentially vulnerable to Cross-Site Scripting (XSS) that can be exploited if certain browser weaknesses are present.

Risk Assessment

An attacker could exploit the vulnerability to execute scripts in the victim's browser context, potentially leading to data theft.

Recommendation

Apply patches provided by HCL and use secure browser configurations.

Other vulnerabilities in HCL DevOps Plan

CVE-2023-37507High
Information disclosure vulnerability in HCL DevOps Plan. An attacker can use the revealed information to focus their attacks.

Original NVD description (English source)

HCL DevOps Plan is potentially susceptible to Cross-Site Scripting (XSS) which could allow an attacker to exploit this vulnerability if certain browser weaknesses are present.