CVE-2022-42447

HCL Compass is vulnerable to Cross-Origin Resource Sharing CORS. This vulnerability can allow an unprivileged remote attacker to trick a legitimate user into accessing a special resource and executing a malicious request...

CVE-2022-42447

HCL Compass is vulnerable to Cross-Origin Resource Sharing CORS. This vulnerability can allow an unprivileged remote attacker to trick a legitimate user into accessing a special resource and executing a malicious request...

CVE-2022-42452

HCL Launch is vulnerable to HTML injection. HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections...

CVE-2022-42452

HCL Launch is vulnerable to HTML injection. HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections...

Input validation

HCL Compass is vulnerable to Cross-Origin Resource Sharing CORS. This vulnerability can allow an unprivileged remote attacker to trick a legitimate user into accessing a special resource and executing a malicious request...

Design/Logic Flaw

HCL Launch is vulnerable to HTML injection. HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections...

HCL Technologies HCL Launch 跨站脚本漏洞

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. It is used to handle the most complex deployment processes in DevOps. A security vulnerability exists in HCL Launch that stems from vulnerability to HTML injection...

HCL Compass 跨站请求伪造漏洞

HCL Technologies Compass is a low-code change management software from HCL Technologies, USA. It manages the full range of testing activities and integration with developer tools. A security vulnerability exists in HCL Compass that stems from the presence of a Cross Resource Sharing CORS...

CVE-2022-42452

HCL Launch is vulnerable to HTML injection. HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections...

CVE-2022-42452

CVE-2022-42452 affects HCL Launch and is a stored HTML injection vulnerability that can lead to XSS and Open Redirections. Public sources describe the issue and reference affected HCL Launch versions (e.g., 6.x to 7.x ranges listed by CNNVD; PT-2023 notes affected versions not specified). The NVD...

CVE-2022-42452

HCL Launch is vulnerable to HTML injection. HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections...

CVE-2022-42452: Improper Neutralization of Input During Web Page Generation

HCL Launch is vulnerable to HTML injection. HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections...

PT-2023-14117 · Hcl · Hcl Launch

Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: The issue is related to HTML injection, where HTML code is stored and included without proper sanitization. This can potentially lead to further attacks, such as Cross-Site Scripting XSS...

CVE-2022-42447 Cross-origin resource sharing vulnerability affects HCL Compass

HCL Compass is vulnerable to Cross-Origin Resource Sharing CORS. This vulnerability can allow an unprivileged remote attacker to trick a legitimate user into accessing a special resource and executing a malicious request...

CVE-2022-42447 Cross-origin resource sharing vulnerability affects HCL Compass

HCL Compass is vulnerable to Cross-Origin Resource Sharing CORS. This vulnerability can allow an unprivileged remote attacker to trick a legitimate user into accessing a special resource and executing a malicious request...

CVE-2022-42447

HCL Compass is affected by a Cross-Origin Resource Sharing (CORS) vulnerability (CVE-2022-42447). The issue could allow an unprivileged remote attacker to trick a legitimate user into accessing a resource and issuing a malicious request. Documented CVSS metrics indicate a HIGH/CRITICAL impact wit...

CVE-2022-42447: Cross-Site Request Forgery (CSRF)

HCL Compass is vulnerable to Cross-Origin Resource Sharing CORS. This vulnerability can allow an unprivileged remote attacker to trick a legitimate user into accessing a special resource and executing a malicious request...

PT-2023-14115 · Hcl · Hcl Compass

Name of the Vulnerable Software and Affected Versions: HCL Compass affected versions not specified Description: The issue allows an unprivileged remote attacker to trick a legitimate user into accessing a special resource and executing a malicious request due to a Cross-Origin Resource Sharing CO...

CVE-2021-27788

HCL Verse is susceptible to a Cross Site Scripting XSS vulnerability. By tricking a user into clicking a crafted URL, a remote unauthenticated attacker could execute script in a victim's web browser to perform operations as the victim and/or steal the victim's cookies, session tokens, or other...

CVE-2021-27788 HCL Verse is susceptible to a Cross Site Scripting (XSS) vulnerability

HCL Verse is susceptible to a Cross Site Scripting XSS vulnerability. By tricking a user into clicking a crafted URL, a remote unauthenticated attacker could execute script in a victim's web browser to perform operations as the victim and/or steal the victim's cookies, session tokens, or other...