A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a form field of a webpage by a user with privileged access.
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0110209