Cross-Site Scripting Vulnerability in HCL DevOps Plan
CVE-2023-37508

2.3LOW

Key Information:

Vendor: HCL Softwaresoftware
Status: Devops Plan
Vendor: CVE Published:; 21 July 2026

🔔 Create HCL Softwaresoftware Vulnerability Alert

What is CVE-2023-37508?

HCL DevOps Plan has a vulnerability that may allow attackers to exploit Cross-Site Scripting (XSS) weaknesses, particularly within specific browser environments. This flaw could enable malicious actors to inject harmful scripts into web pages, potentially compromising user data and session integrity. It is essential for users to assess their security posture and implement best practices to mitigate potential threats.

Affected Version(s)

DevOps Plan <3.0.05

References

https://support.hcl-software.com/csm?id=kb_article&syspar...

CVSS V4

Score:

2.3

Severity:

LOW

Confidentiality:

Low

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

High

Attack Required:

Physical

Privileges Required:

Undefined

User Interaction:

Unknown

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 21, 2026
Vulnerability Reserved
Jul 6, 2023

CVE-2023-37508 Data

JSON