CVE-2020-4080

2020-12-1821:14:49

HCL

www.cve.org

0.002 Low

EPSS

Percentile

51.6%

JSON

HCL Verse v10 and v11 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to improper handling of message content. An unauthenticated remote attacker could exploit this vulnerability using specially-crafted markup to execute script in a victim’s web browser within the security context of the hosting Web site and/or steal the victim’s cookie-based authentication credentials.

CNA Affected

[
  {
    "product": "HCL Verse",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "v10, v11"
      }
    ]
  }
]

References

support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085887

0.002 Low

EPSS

Percentile

51.6%

JSON

Related for CVELIST:CVE-2020-4080