PT-2023-29654 · Hcl · Hcl Launch

Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further...

CVE-2023-45701: Generation of Error Message Containing Sensitive Information

HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

CVE-2023-45700

HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure...

CVE-2023-45700

HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure...

Design/Logic Flaw

HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure...

CVE-2023-45703

HCL Launch may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion...

CVE-2023-45703

HCL Launch may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion...

Input validation

HCL Launch may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion...

CVE-2023-45700 HCL Launch is susceptible to an HTML injection vulnerability

HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure...

CVE-2023-45700

CVE-2023-45700 affects HCL Launch where an HTML injection flaw exists in the Web UI. The root cause is insufficient input sanitization/escaping in the UI, allowing an attacker to embed arbitrary HTML, potentially leading to disclosure of sensitive information. Affected product: HCL Launch (Web UI...

HCL Technologies HCL Launch Cross-Site Scripting Vulnerability

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. for handling the most complex deployment processes in DevOps. A security vulnerability exists in HCL Launch that stems from a vulnerability that allows an attacker to...

CVE-2023-45700: Improper Neutralization of Input During Web Page Generation

HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure...

CVE-2023-45703 HCL Launch is susceptible to a Denial of Service vulnerability

HCL Launch may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion...

CVE-2023-45703

CVE-2023-45703 affects HCL Launch. The issue is improper input validation of uploaded archive files, causing resource exhaustion and denial of service. The root cause is mishandling input validation in the archive upload process. Impact is described as high for availability; exploitation details ...

CVE-2023-45703: Undefined Security Weakness

HCL Launch may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion...

PT-2023-29656 · Hcl · Hcl Launch

Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: The issue is related to the mishandling of input validation of an uploaded archive file, which can lead to a denial of service due to resource exhaustion. Recommendations: At the moment,...

PT-2023-29653 · Hcl · Hcl Launch

Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: The issue allows a user to embed arbitrary HTML tags in the Web UI, potentially leading to sensitive information disclosure. This is due to an HTML injection vulnerability...

CVE-2023-23348

HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed...

CVE-2023-23348

HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed...

Design/Logic Flaw

HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed...