4365 matches found
CVE-2024-30113
Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget...
CVE-2023-45720
Insufficient default configuration in HCL Leap allows anonymous access to directory information...
CVE-2024-30113
Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget...
CVE-2023-45720
Insufficient default configuration in HCL Leap allows anonymous access to directory information...
CVE-2023-37534
Insufficient URI protocol whitelist in HCL Leap allows script injection through query parameters...
CVE-2023-37534
Insufficient URI protocol whitelist in HCL Leap allows script injection through query parameters...
CVE-2023-37534 HCL Leap is affected by a Cross-site scripting (XSS) vulnerability
Insufficient URI protocol whitelist in HCL Leap allows script injection through query parameters...
CVE-2023-37534 HCL Leap is affected by a Cross-site scripting (XSS) vulnerability
Insufficient URI protocol whitelist in HCL Leap allows script injection through query parameters...
CVE-2023-37534
CVE-2023-37534 affects HCL Leap: insufficient URI protocol whitelist allows script injection via query parameters in the web app. Reported severity varies by source (NVD: CVSS v3.1 base 6.1; CNA data shows higher impact on integrity). Affected component is the HCL Leap URI handling logic; exploit...
CVE-2023-45720
CVE-2023-45720 affects HCL Leap and is due to insufficient default configuration that permits anonymous access to directory information. The NVD entry lists a CVSS v3.1 base score of 5.3 (Medium), with Network attack vector, Low attack complexity, Privileges Required: None, User Interaction: None...
CVE-2023-45720 HCL Leap is affected by a disclosure of private personal information vulnerability
Insufficient default configuration in HCL Leap allows anonymous access to directory information...
CVE-2023-45720 HCL Leap is affected by a disclosure of private personal information vulnerability
Insufficient default configuration in HCL Leap allows anonymous access to directory information...
CVE-2024-30113 HCL Leap is affected by a cross-site scripting (XSS) vulnerability
Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget...
CVE-2024-30113
The CVE-2024-30113 issue affects HCL Leap, specifically the HTML widget, where insufficient sanitization policy enables client-side script injection. The problem is described across multiple connected records as an XSS risk in HCL Leap’s deployment, without explicit exploitation details provided....
CVE-2024-30113 HCL Leap is affected by a cross-site scripting (XSS) vulnerability
Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget...
CVE-2024-30114 HCL Leap is affected by a cross-site scripting (XSS) vulnerability
Insufficient sanitization in HCL Leap allows client-side script injection in the authoring environment...
CVE-2024-30114 HCL Leap is affected by a cross-site scripting (XSS) vulnerability
Insufficient sanitization in HCL Leap allows client-side script injection in the authoring environment...
CVE-2024-30114
CVE-2024-30114 concerns an XSS issue in HCL Leap caused by insufficient sanitization in the authoring environment, allowing client-side script injection. Across connected documents, the affected product is consistently HCL Leap, with its vulnerability described as an input sanitization flaw leadi...
CVE-2024-30147
CVE-2024-30147 affects HCL Leap with multiple vectors enabling client-side script injection in the authoring environment and deployed applications. The provided documents confirm an XSS-type issue and give CVSS-based severity (MEDIUM) but do not disclose a specific patched version or definitive r...