CVE-2019-4301

CVE-2019-4301 describes an arbitrary code execution vulnerability in the HCL BigFix Self-Service Application (SSA) when malicious Javascript is embedded in the Running Message or Post Message HTML. This vulnerability carries a high CVSS score of 8.4, indicating a critical risk due to its network-based attack vector, low attack complexity, and high potential for impact on confidentiality, integrity, and availability, though it requires high privileges and user interaction. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.