Lucene search

HCLCVELIST:CVE-2021-27788

HistoryMar 10, 2023 - 4:13 a.m.

CVE-2021-27788 HCL Verse is susceptible to a Cross Site Scripting (XSS) vulnerability

2023-03-1004:13:05

HCL

www.cve.org

hcl verse

cross site scripting

cve-2021-27788

vulnerability

remote attack

web browser

sensitive information

8.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.9%

JSON

HCL Verse is susceptible to a Cross Site Scripting (XSS) vulnerability. By tricking a user into clicking a crafted URL, a remote unauthenticated attacker could execute script in a victim’s web browser to perform operations as the victim and/or steal the victim’s cookies, session tokens, or other sensitive information.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Verse",
    "vendor": "HCL Software",
    "versions": [
      {
        "status": "affected",
        "version": "2.x"
      }
    ]
  }
]

References

support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0103678

8.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.9%

JSON

Related for CVELIST:CVE-2021-27788