CVE-2023-28016

6.1 mediumEPSS 0.3%

Medium (6.1) in hcltech bigfix osd bare metal server. EPSS 0.3% chance of exploitation in the next 30 days.

Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Bare Metal Server to perform a redirect to an attacker-controlled domain.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 23% of CVEs (scores of 2026-10-31)
CWE: CWE-74
Published: 2023-06-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hcltech:bigfix_osd_bare_metal_server

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105601
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105601

Check your stack JSON