4365 matches found
HCL Leap 安全漏洞
HCL Leap is a low-code development platform from HCL India. A security vulnerability exists in HCL Leap, which stems from the lack of a no cache header, which could lead to user directory information being cached...
CVE-2023-37516: Use of Cache Containing Sensitive Information
Missing "no cache" headers in HCL Leap permits user directory information to be cached...
CVE-2022-44760: Unrestricted Upload of File with Dangerous Type
Unsafe default file type filter policy in HCL Leap allows execution of unsafe JavaScript in deployed applications...
CVE-2022-44759: Improper Neutralization of Input During Web Page Generation
Improper sanitization of SVG files in HCL Leap allows client-side script injection in deployed applications...
CVE-2024-30147: Improper Neutralization of Input During Web Page Generation
Multiple vectors in HCL Leap allow client-side script injection in the authoring environment and deployed applications...
CVE-2024-30114: Improper Neutralization of Input During Web Page Generation
Insufficient sanitization in HCL Leap allows client-side script injection in the authoring environment...
CVE-2024-30113: Improper Neutralization of Input During Web Page Generation
Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget...
CVE-2023-45720: Exposure of Private Personal Information to an Unauthorized Actor
Insufficient default configuration in HCL Leap allows anonymous access to directory information...
CVE-2023-37534: Improper Neutralization of Input During Web Page Generation
Insufficient URI protocol whitelist in HCL Leap allows script injection through query parameters...
CVE-2024-30148: Improper Access Control
Improper access control of endpoint in HCL Leap allows certain admin users to import applications from the server's filesystem...
CVE-2024-42178
HCL MyXalytics is affected by a failure to restrict URL access vulnerability. Unauthenticated users might gain unauthorized access to potentially confidential information, creating a risk of misuse, manipulation, or unauthorized distribution...
CVE-2024-42178
HCL MyXalytics is affected by a failure to restrict URL access vulnerability. Unauthenticated users might gain unauthorized access to potentially confidential information, creating a risk of misuse, manipulation, or unauthorized distribution...
CVE-2024-42178 HCL MyXalytics is affected by a failure to restrict URL access vulnerability
HCL MyXalytics is affected by a failure to restrict URL access vulnerability. Unauthenticated users might gain unauthorized access to potentially confidential information, creating a risk of misuse, manipulation, or unauthorized distribution...
CVE-2024-42178
Technical details (affected product versions, root cause specifics, or fixes) for CVE-2024-42178 are not publicly provided in the supplied documents. Monitor for updates as more information becomes available in connected sources.
CVE-2024-42178 HCL MyXalytics is affected by a failure to restrict URL access vulnerability
HCL MyXalytics is affected by a failure to restrict URL access vulnerability. Unauthenticated users might gain unauthorized access to potentially confidential information, creating a risk of misuse, manipulation, or unauthorized distribution...
CVE-2024-42177
HCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH & LUCKY13 vulnerabilities. Attackers can exploit the weakness in the ciphers to intercept and decrypt encrypted data, steal sensitive information, or inject malicious code into the system...
CVE-2024-42177
HCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH & LUCKY13 vulnerabilities. Attackers can exploit the weakness in the ciphers to intercept and decrypt encrypted data, steal sensitive information, or inject malicious code into the system...
CVE-2024-42193
HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle MITM attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized acces...