What’s Vulnerable › Vulnerabilities

CVE-2023-28016: HCL BigFix OSD Bare Metal Server is affected by a host header injection vulnerability

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-06-22 · updated 2026-06-17
• Weakness: CWE-74

Description

Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Bare Metal Server to perform a redirect to an attacker-controlled domain.

Affected products

• HCL Software HCL BigFix OSD Bare Metal Server: through 311.12

References

• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105601
• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105601

Get alerted when CVE-2023-28016 or the next vulnerability affects your stack