4364 matches found
CVE-2023-37541 HCL Connections is vulnerable to broken access control
HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios...
CVE-2023-37541 HCL Connections is vulnerable to broken access control
HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios...
PT-2024-23192
Name of the Vulnerable Software and Affected Versions HCL Connections affected versions not specified Description The issue allows an attacker to execute arbitrary script code in the browser of an unsuspecting user through a cross-site scripting attack. This can lead to the execution of malicious...
CVE-2023-37541: Undefined Security Weakness
HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios...
CVE-2024-30112: Improper Neutralization of Input During Web Page Generation
HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user which leads to executing malicious script code. This may let the attacker steal cookie-based authentication credentials...
CVE-2024-30119
HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header. This could allow an attacker to intercept or manipulate data during redirection...
CVE-2024-30120
HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application...
CVE-2024-30120 HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application
HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application...
CVE-2024-30120 HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application
HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application...
CVE-2024-30120
CVE-2024-30120 affects HCL DRYiCE Optibot Reset Station. The vulnerability is described as an Unused Parameter in the web application. The only concrete technical detail provided is the CVSS v3.1 metrics: AV:L, AC:H, PR:N, UI:N, S:U, C:L, I:N, A:N, with a base score of 2.9 (LOW). Exploitation is ...
CVE-2024-30119
CVE-2024-30119 affects HCL DRYiCE Optibot Reset Station due to a missing Strict Transport Security (HSTS) header. Underlying issue allows potential interception or manipulation of data during redirection. CVSSv3.1/3.1 metrics indicate a base score of 3.7 (LOW) with Network attack vector, high att...
CVE-2024-30119 HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header
HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header. This could allow an attacker to intercept or manipulate data during redirection...
CVE-2024-30119 HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header
HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header. This could allow an attacker to intercept or manipulate data during redirection...
PT-2024-23196
Name of the Vulnerable Software and Affected Versions HCL DRYiCE Optibot Reset Station affected versions not specified Description The issue is related to an unused parameter in the web application of HCL DRYiCE Optibot Reset Station. Recommendations At the moment, there is no information about a...
HCL Technologies DRYiCE Optibot Reset Station Security Vulnerability
HCL Technologies DRYiCE Optibot Reset Station is an application from HCL Technologies, USA. A security vulnerability exists in HCL Technologies DRYiCE Optibot Reset Station that stems from the lack of a Strict Transport Security header. An attacker exploiting this vulnerability could intercept or...
PT-2024-23195
Name of the Vulnerable Software and Affected Versions HCL DRYiCE Optibot Reset Station affected versions not specified Description The issue is related to a missing Strict Transport Security Header, which could allow an attacker to intercept or manipulate data during redirection. This affects the...
CVE-2024-30120: Assignment to Variable without Use
HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application...
CVE-2024-30119: Insufficiently Protected Credentials
HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header. This could allow an attacker to intercept or manipulate data during redirection...
HCL Technologies DRYiCE Optibot Reset Station Security Vulnerability
HCL Technologies DRYiCE Optibot Reset Station is an application from HCL Technologies, USA. A security vulnerability exists in HCL Technologies DRYiCE Optibot Reset Station that stems from vulnerability to unused parameters in a web application...
CVE-2023-45707
HCL Connections Docs is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary code. This may lead to credentials disclosure and possibly launch additional attacks...