[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2023-28008":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":22,"technologies":37,"references":39,"score":41,"epss_score":42,"epss_percentile":43,"is_kev":44,"cisa_kev_date_added":45,"cisa_kev_due_date":45,"cisa_ssvc":46,"attack_mappings":56,"exploits":63},347791,"CVE-2023-28008","EUVD-2023-31733","HCL Workload Automation 9.4, 9.5, and 10.1 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.\n","2023-04-26T20:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":17,"attackComplexity":18,"availabilityImpact":15,"privilegesRequired":18,"confidentialityImpact":15},"UNCHANGED","3.1",8.1,"NETWORK","HIGH","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H","NONE","LOW",true,[21],"CWE-611",[23,24,25,26,27,28,29,30,31,32,33,34,35,36],"cpe:2.3:a:hcltech:workload_automation:9.5.0:fix_pack_3:*:*:*:*:*:*","cpe:2.3:a:hcltech:workload_automation:9.4.0:fix_pack_6:*:*:*:*:*:*","cpe:2.3:a:hcltech:workload_automation:9.4.0:fix_pack_4:*:*:*:*:*:*","cpe:2.3:a:hcltech:workload_automation:9.4.0:-:*:*:*:*:*:*","cpe:2.3:a:hcltech:workload_automation:9.5.0:-:*:*:*:*:*:*","cpe:2.3:a:hcltech:workload_automation:9.5.0:fix_pack_2:*:*:*:*:*:*","cpe:2.3:a:hcltech:workload_automation:9.4.0:fix_pack_3:*:*:*:*:*:*","cpe:2.3:a:hcltech:workload_automation:9.5.0:fix_pack_5:*:*:*:*:*:*","cpe:2.3:a:hcltech:workload_automation:10.1.0:-:*:*:*:*:*:*","cpe:2.3:a:hcltech:workload_automation:9.5.0:fix_pack_1:*:*:*:*:*:*","cpe:2.3:a:hcltech:workload_automation:9.5.0:fix_pack_4:*:*:*:*:*:*","cpe:2.3:a:hcltech:workload_automation:9.5.0:fix_pack_6:*:*:*:*:*:*","cpe:2.3:a:hcltech:workload_automation:9.4.0:fix_pack_7:*:*:*:*:*:*","cpe:2.3:a:hcltech:workload_automation:9.4.0:fix_pack_5:*:*:*:*:*:*",[38],"Hcltech Workload Automation",[40],"https:\u002F\u002Fsupport.hcltechsw.com\u002Fcsm?id=kb_article&sysparm_article=KB0104371",0.6,0.00821,0.56907,false,null,{"timestamp":47,"automatable":48,"tech_impact":49,"exploitation":50,"cisa_decision":51,"cisa_remediation_timeline":55},"2025-01-30T21:29:25.917052Z","no","partial","none",{"vector":52,"decision":53,"priority":54},"CISAv1\u002FE:N\u002FA:N\u002FT:P\u002FM:H\u002F2026-10-25T12:12:33.870447\u002F","track_star","medium","60D",[57],{"name":58,"source":59,"tactics":60,"technique_id":62},"Exploit Public-Facing Application","attack_vector",[61],"initial-access","T1190",[]]