The HCL BigFix SCM Reporting site contains an outdated and unsupported version of the jQuery 1.x library. Since jQuery 1.x has reached end-of-life and no longer receives security updates, it may expose the application to publicly known security weaknesses and increase the risk of client-side attacks such as Cross-Site Scripting (XSS) or manipulation through vulnerable third-party components.
Weakness
The product relies on third-party components that are not actively supported or maintained by the original developer or a trusted proxy for the original developer.
References
- https://support.hcl-software.com/csm?id=kb_article\u0026sysparm_article=KB0130744