140 matches found
Design/Logic Flaw
HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure...
CVE-2023-45703
HCL Launch may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion...
CVE-2023-45703
HCL Launch may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion...
Input validation
HCL Launch may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion...
CVE-2023-45700 HCL Launch is susceptible to an HTML injection vulnerability
HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure...
CVE-2023-45700
CVE-2023-45700 affects HCL Launch where an HTML injection flaw exists in the Web UI. The root cause is insufficient input sanitization/escaping in the UI, allowing an attacker to embed arbitrary HTML, potentially leading to disclosure of sensitive information. Affected product: HCL Launch (Web UI...
HCL Technologies HCL Launch Cross-Site Scripting Vulnerability
HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. for handling the most complex deployment processes in DevOps. A security vulnerability exists in HCL Launch that stems from a vulnerability that allows an attacker to...
CVE-2023-45703 HCL Launch is susceptible to a Denial of Service vulnerability
HCL Launch may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion...
CVE-2023-45703
CVE-2023-45703 affects HCL Launch. The issue is improper input validation of uploaded archive files, causing resource exhaustion and denial of service. The root cause is mishandling input validation in the archive upload process. Impact is described as high for availability; exploitation details ...
PT-2023-29653 · Hcl · Hcl Launch
Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: The issue allows a user to embed arbitrary HTML tags in the Web UI, potentially leading to sensitive information disclosure. This is due to an HTML injection vulnerability...
PT-2023-29656 · Hcl · Hcl Launch
Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: The issue is related to the mishandling of input validation of an uploaded archive file, which can lead to a denial of service due to resource exhaustion. Recommendations: At the moment,...
CVE-2023-23348
HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed...
CVE-2023-23348
HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed...
Design/Logic Flaw
HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed...
CVE-2023-23348 HCL Launch is vulnerable to sensitive information disclosure
HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed...
CVE-2023-23348 HCL Launch is vulnerable to sensitive information disclosure
HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed...
HCL Technologies HCL Launch 安全漏洞
HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. It is used to handle the most complex deployment processes in DevOps. HCL Launch has a security vulnerability that stems from the possibility of disclosing sensitive...
PT-2023-18920 · Hcl · Hcl Launch
Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: The issue concerns the potential disclosure of sensitive information in HCL Launch if a manual edit of a configuration file has been performed. Recommendations: At the moment, there is n...