Lucene search
+L

4365 matches found

NVD
NVD
•added 2024/06/08 3:15 p.m.•26 views

CVE-2023-45707

HCL Connections Docs is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary code. This may lead to credentials disclosure and possibly launch additional attacks...

4.4CVSS0.0025EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/08 3:10 p.m.•16 views

CVE-2023-45707 HCL Connections Docs is vulnerable to Cross-Site Scripting (XSS)

HCL Connections Docs is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary code. This may lead to credentials disclosure and possibly launch additional attacks...

4.4CVSS7AI score0.0025EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/08 3:10 p.m.•57 views

CVE-2023-45707

CVE-2023-45707 affects HCL Connections Docs. Connected PT-security data specifies that versions prior to 2.0.2 are vulnerable to cross-site scripting, enabling an attacker to leverage the issue to execute arbitrary code and potentially disclose credentials. The remediation is to upgrade to a vers...

4.4CVSS5.1AI score0.0025EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/08 3:10 p.m.•39 views

CVE-2023-45707 HCL Connections Docs is vulnerable to Cross-Site Scripting (XSS)

HCL Connections Docs is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary code. This may lead to credentials disclosure and possibly launch additional attacks...

4.4CVSS0.0025EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/06/08 12:00 a.m.•14 views

HCL Technologies HCL Connections Security Breach

HCL Technologies HCL Connections is a suite of enterprise collaboration platforms from HCL Technologies, USA. A security vulnerability exists in HCL Technologies HCL Connections Docs 2.0.2 and earlier versions, which stems from vulnerability to cross-site scripting attacks and can be exploited by...

4.4CVSS6.5AI score0.0025EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/08 12:00 a.m.•6 views

CVE-2023-45707: Improper Neutralization of Input During Web Page Generation

HCL Connections Docs is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary code. This may lead to credentials disclosure and possibly launch additional attacks...

4.4CVSS6.3AI score0.0025EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/06 10:43 p.m.•30 views

CVE-2023-37539 HCL Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability

The Domino Catalog template is susceptible to a Stored Cross-Site Scripting XSS vulnerability. An attacker with the ability to edit documents in the catalog application/database created from this template can embed a cross site scripting attack. The attack would be activated by an end user clicki...

8.4CVSS5.2AI score0.00306EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/06 10:43 p.m.•53 views

CVE-2023-37539 HCL Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability

The Domino Catalog template is susceptible to a Stored Cross-Site Scripting XSS vulnerability. An attacker with the ability to edit documents in the catalog application/database created from this template can embed a cross site scripting attack. The attack would be activated by an end user clicki...

8.4CVSS0.00306EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/06/06 12:00 a.m.•17 views

HCL Technologies HCL Domino Security Vulnerability

HCL Technologies HCL Domino is an application software from HCL Technologies, Inc. It provides an application development platform. A security vulnerability exists in HCL Technologies HCL Domino Catalog that stems from vulnerability to stored cross-site scripting XSS attacks, which allows an...

8.4CVSS5.8AI score0.00306EPSS
SaveExploits0References2
NVD
NVD
•added 2024/05/28 10:15 p.m.•31 views

CVE-2024-23580

HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords OTPs. This could allow an attacker with access to the database to recover some or all encrypted values...

6.5CVSS6.4AI score0.0015EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/28 9:29 p.m.•24 views

CVE-2024-23580 HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs)

HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords OTPs. This could allow an attacker with access to the database to recover some or all encrypted values...

6.5CVSS6.9AI score0.0015EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/05/28 9:29 p.m.•42 views

CVE-2024-23580 HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs)

HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords OTPs. This could allow an attacker with access to the database to recover some or all encrypted values...

6.5CVSS6.4AI score0.0015EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/28 9:25 p.m.•17 views

CVE-2024-23579 HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions

HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions. This could allow an attacker with access to the database to recover some or all encrypted values...

6.5CVSS7AI score0.0015EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/05/28 9:25 p.m.•47 views

CVE-2024-23579 HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions

HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions. This could allow an attacker with access to the database to recover some or all encrypted values...

6.5CVSS6.4AI score0.0015EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/28 12:00 a.m.•17 views

HCL Technologies HCL DRYiCE Optibot Reset Station 安全漏洞

HCL Technologies HCL DRYiCE Lucy is an AI-powered virtual assistant from HCL Technologies, USA. A security vulnerability exists in the HCL Technologies HCL DRYiCE Optibot Reset Station, which stems from being affected by insecure encryption for security issues...

6.5CVSS6.8AI score0.0015EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/28 12:00 a.m.•6 views

CVE-2024-23579: Inadequate Encryption Strength

HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions. This could allow an attacker with access to the database to recover some or all encrypted values...

6.5CVSS5.8AI score0.0015EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/28 12:00 a.m.•21 views

HCL Technologies HCL DRYiCE Optibot Reset Station 安全漏洞

HCL Technologies HCL DRYiCE Lucy is an AI-powered virtual assistant from HCL Technologies, USA. A security vulnerability exists in the HCL Technologies HCL DRYiCE Optibot Reset Station that stems from being affected by insecure encryption with a one-time password OTP...

6.5CVSS6.9AI score0.0015EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/28 12:00 a.m.•8 views

CVE-2024-23580: Inadequate Encryption Strength

HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords OTPs. This could allow an attacker with access to the database to recover some or all encrypted values...

6.5CVSS5.8AI score0.0015EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/05/17 11:40 p.m.•48 views

CVE-2024-23556 HCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiation

SSL/TLS Renegotiation functionality potentially leading to DoS attack vulnerability...

5.9CVSS5.8AI score0.00371EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/17 11:40 p.m.•36 views

CVE-2024-23556 HCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiation

SSL/TLS Renegotiation functionality potentially leading to DoS attack vulnerability...

5.9CVSS6.9AI score0.00371EPSS
SaveExploits0References1
Rows per page
Query Builder