Lucene search

HCLCVE-2020-14255

HistoryFeb 02, 2021 - 8:15 p.m.

CVE-2020-14255

2021-02-0220:15:11

HCL

web.nvd.nist.gov

hcl

digital experience

9.5

containers

vulnerabilities

sensitive data

unauthorized access

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

53.8%

JSON

HCL Digital Experience 9.5 containers include vulnerabilities that could expose sensitive data to unauthorized parties via crafted requests. These affect containers only. These do not affect traditional on-premise installations.

Affected configurations

Nvd

Node

hcltechdigital_experienceMatch9.5

VendorProductVersionCPE
hcltechdigital_experience9.5cpe:2.3:a:hcltech:digital_experience:9.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hcltech	digital_experience	9.5	cpe:2.3:a:hcltech:digital_experience:9.5:::::::*

CNA Affected

[
  {
    "product": "HCL Digital Experience",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "9.5 (containers only)"
      }
    ]
  }
]

References

support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085234

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

53.8%

JSON

Related for CVE-2020-14255