4365 matches found
CVE-2024-30110
CVE-2024-30110 affects HCL DRYiCE AEX, with a lack of input validation in the web application component. The CVE is tied to DRYiCE AEX v10, indicating the affected version. Documented impact indicates high confidentiality, integrity, and availability concerns per CVSS 3.1 metrics, but the provide...
CVE-2024-30110 Lack of input validation vulnerability affects DRYiCE AEX v10
HCL DRYiCE AEX product is impacted by lack of input validation vulnerability in a particular web application. A malicious script can be injected into a system which can cause the system to behave in unexpected ways...
CVE-2024-30109
HCL DRYiCE AEX is impacted by a lack of clickjacking protection in the AEX web application. An attacker can use multiple transparent or opaque layers to trick a user into clicking on a button or link on another page than the one intended...
CVE-2024-30109
HCL DRYiCE AEX is impacted by a lack of clickjacking protection in the AEX web application. An attacker can use multiple transparent or opaque layers to trick a user into clicking on a button or link on another page than the one intended...
CVE-2024-30109 Lack of Clickjacking Protection vulnerability affects DRYiCE AEX v10
HCL DRYiCE AEX is impacted by a lack of clickjacking protection in the AEX web application. An attacker can use multiple transparent or opaque layers to trick a user into clicking on a button or link on another page than the one intended...
PT-2024-23208
Name of the Vulnerable Software and Affected Versions HCL DRYiCE AEX affected versions not specified Description The issue concerns the potential disclosure of sensitive information in the mobile application of HCL DRYiCE AEX when a snapshot is taken. Recommendations At the moment, there is no...
CVE-2024-30110: Improper Input Validation
HCL DRYiCE AEX product is impacted by lack of input validation vulnerability in a particular web application. A malicious script can be injected into a system which can cause the system to behave in unexpected ways...
PT-2024-23189
Name of the Vulnerable Software and Affected Versions HCL DRYiCE AEX affected versions not specified Description The issue is related to a lack of clickjacking protection in the AEX web application. An attacker can use multiple transparent or opaque layers to trick a user into clicking on a butto...
PT-2024-23191
Name of the Vulnerable Software and Affected Versions HCL DRYiCE AEX affected versions not specified Description The HCL DRYiCE AEX product is impacted by a Missing Root Detection issue in its mobile application. This allows the mobile app to be installed on rooted devices, potentially enabling...
CVE-2024-30135: Exposure of Sensitive Information to an Unauthorized Actor
HCL DRYiCE AEX is potentially impacted by disclosure of sensitive information in the mobile application when a snapshot is taken...
CVE-2024-30111: Missing Immutable Root of Trust in Hardware
HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breache...
CVE-2024-30109: Improper Restriction of Rendered UI Layers or Frames
HCL DRYiCE AEX is impacted by a lack of clickjacking protection in the AEX web application. An attacker can use multiple transparent or opaque layers to trick a user into clicking on a button or link on another page than the one intended...
PT-2024-23190
Name of the Vulnerable Software and Affected Versions HCL DRYiCE AEX affected versions not specified Description The issue is related to a lack of input validation in a web application, allowing a malicious script to be injected into the system. This can cause the system to behave in unexpected...
CVE-2024-30112
HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user which leads to executing malicious script code. This may let the attacker steal cookie-based authentication credentials...
CVE-2024-30112
HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user which leads to executing malicious script code. This may let the attacker steal cookie-based authentication credentials...
CVE-2024-30112 HCL Connections is vulnerable to a cross-site scripting (XSS) vulnerability
HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user which leads to executing malicious script code. This may let the attacker steal cookie-based authentication credentials...
CVE-2024-30112
CVE-2024-30112 concerns HCL Connections and describes a cross-site scripting (XSS) vulnerability. The issue allows an attacker to execute arbitrary script code in a user’s browser, which could enable theft of cookie-based authentication credentials and compromise of the user’s account, potentiall...
CVE-2024-30112 HCL Connections is vulnerable to a cross-site scripting (XSS) vulnerability
HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user which leads to executing malicious script code. This may let the attacker steal cookie-based authentication credentials...