140 matches found
Design/Logic Flaw
HCL Launch is vulnerable to HTML injection. HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections...
HCL Technologies HCL Launch 跨站脚本漏洞
HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. It is used to handle the most complex deployment processes in DevOps. A security vulnerability exists in HCL Launch that stems from vulnerability to HTML injection...
CVE-2022-42452
CVE-2022-42452 affects HCL Launch and is a stored HTML injection vulnerability that can lead to XSS and Open Redirections. Public sources describe the issue and reference affected HCL Launch versions (e.g., 6.x to 7.x ranges listed by CNNVD; PT-2023 notes affected versions not specified). The NVD...
CVE-2022-42452
HCL Launch is vulnerable to HTML injection. HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections...
CVE-2022-42452
HCL Launch is vulnerable to HTML injection. HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections...
PT-2023-14117 · Hcl · Hcl Launch
Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: The issue is related to HTML injection, where HTML code is stored and included without proper sanitization. This can potentially lead to further attacks, such as Cross-Site Scripting XSS...
CVE-2022-42445
HCL Launch could allow a user with administrative privileges, including "Manage Security" permissions, the ability to recover a credential previously saved for performing authenticated LDAP searches...
CVE-2022-42445
HCL Launch could allow a user with administrative privileges, including "Manage Security" permissions, the ability to recover a credential previously saved for performing authenticated LDAP searches...
HCL Technologies HCL Launch 安全漏洞
HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. for handling the most complex deployment processes in DevOps. A security vulnerability exists in HCL Technologies HCL Launch that stems from the fact that its Launch...
CVE-2022-42445 HCL Launch is vulnerable to Insufficiently Protected LDAP Search Credentials (CVE-2022-42445)
HCL Launch could allow a user with administrative privileges, including "Manage Security" permissions, the ability to recover a credential previously saved for performing authenticated LDAP searches...
CVE-2022-42445 HCL Launch is vulnerable to Insufficiently Protected LDAP Search Credentials (CVE-2022-42445)
HCL Launch could allow a user with administrative privileges, including "Manage Security" permissions, the ability to recover a credential previously saved for performing authenticated LDAP searches...
PT-2022-26436 · Hcl · Hcl Launch
Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: The issue allows a user with administrative privileges, including "Manage Security" permissions, to recover a credential previously saved for performing authenticated LDAP searches...
CVE-2021-27784
The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...
Design/Logic Flaw
The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...
CVE-2021-27784 HCL Launch container images may contain non-unique https certificates and database encryption key
The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...
CVE-2021-27784
CVE-2021-27784 affects HCL Launch Container images, where non-unique HTTPS certificates and a database encryption key are included. The documented vulnerability is limited to the container images and does not affect standard installer packages. The available remediation is a fix that provides dir...
CVE-2021-27784 HCL Launch container images may contain non-unique https certificates and database encryption key
The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...
CVE-2022-27551
HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking...