SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2023-37508

MEDIUM · CVSS 6.1 EPSS 0.13% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-21 · Last synced 2026-08-20

CyberRota Analysis

AI-Generated

HCL DevOps Plan is vulnerable to Cross-Site Scripting (XSS), which could enable attackers to execute malicious scripts in the context of a user's browser, potentially compromising sensitive information. Organizations utilizing this software should prioritize addressing this vulnerability, especially if their environments include browsers with known weaknesses that could be exploited.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2023-37508
Severity
MEDIUM
CVSS
6.1
EPSS
0.13%

Original NVD Description

HCL DevOps Plan is potentially susceptible to Cross-Site Scripting (XSS) which could allow an attacker to exploit this vulnerability if certain browser weaknesses are present.

Related CVEs

Other vulnerabilities affecting the same vendor(s)