504 matches found
CVE-2019-4393
HCL AppScan Standard is vulnerable to excessive authorization attempts...
CVE-2019-4391
HCL AppScan Standard is vulnerable to XML External Entity Injection XXE attack when processing XML data...
Authorization
HCL AppScan Standard is vulnerable to excessive authorization attempts...
Xxe
HCL AppScan Standard is vulnerable to XML External Entity Injection XXE attack when processing XML data...
CVE-2019-4393
CVE-2019-4393 affects HCL AppScan Standard; root cause is an incorrect account lockout setting that enables excessive/brute-force authorization attempts. NVD notes a high-severity impact (CVSS 3.1: CRITICAL) with network exposure; exploitation status is not provided in the connected documents.
CVE-2019-4393
HCL AppScan Standard is vulnerable to excessive authorization attempts...
CVE-2019-4391
HCL AppScan Standard is vulnerable to XML External Entity Injection XXE attack when processing XML data...
CVE-2019-4391
CVE-2019-4391 concerns HCL AppScan Standard being vulnerable to XML External Entity (XXE) injection while processing XML data. The CVSSv3.1 base score is 8.2 (HIGH) with network attack vector, no privileges required, no user interaction, and a confidentiality impact of HIGH, availability impact L...
CVE-2019-4393: Improper Restriction of Excessive Authentication Attempts
HCL AppScan Standard is vulnerable to excessive authorization attempts...
CVE-2019-4391: Improper Restriction of XML External Entity Reference
HCL AppScan Standard is vulnerable to XML External Entity Injection XXE attack when processing XML data...
CVE-2019-4392
HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system...
CVE-2019-4392
HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system...
Hardcoded credentials
HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system...
CVE-2019-4392
HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system...
CVE-2019-4392
CVE-2019-4392 affects HCL AppScan Standard Edition (version 9.0.3.13 and earlier). The underlying issue is hard-coded credentials in the product, enabling attackers to gain unauthorized access. CVSS indicates high/critical impact (C/H, I/H, A/H) with network attack vector and no user interaction....
CVE-2019-4392: Use of Hard-coded Credentials
HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system...
HCL Technologies AppScan Source Cross-Site Scripting Vulnerability
HCL Technologies AppScan Source is a static application security testing solution from HCL Technologies India. A cross-site scripting vulnerability exists in HCL Technologies AppScan Source. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An...
CVE-2019-4388
HCL AppScan Source 9.0.3.13 and earlier is susceptible to cross-site scripting XSS attacks by allowing users to embed arbitrary JavaScript code in the Web UI...