Retour à la veille
CVE-2026-56619
Score CVSS
5.4
MEDIUM
Description détaillée
HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS) due to insufficient validation and output encoding of user-controlled input.
Vecteur d'attaque (CVSS)
Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Références et Patchs
Dernières Vulnérabilités
CVE-2026-72900
Metabase allows an authenticated, low-privileged attacker to read the entire Metabase application database.
VOIR DÉTAILS
CVE-2026-72899
Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter (dimension) parameter.
VOIR DÉTAILS
CVE-2026-72898
Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.
VOIR DÉTAILS