PT-2022-27301 · Hcl +2 · Hcl Notes +2

Name of the Vulnerable Software and Affected Versions: HCL Notes affected versions not specified Description: The issue is a stack-based buffer overflow in lasr.dll within Micro Focus KeyView, which could allow a remote unauthenticated attacker to crash the application or execute arbitrary code b...

CVE-2022-44751: Out-of-bounds Write

HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in...

PT-2022-27304 · Micro Focus +1 · Micro Focus Keyview +2

Name of the Vulnerable Software and Affected Versions: HCL Domino affected versions not specified Description: The issue is related to a stack-based buffer overflow in lasr.dll within Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute...

CVE-2022-44755: Out-of-bounds Write

HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in...

CVE-2022-44754: Out-of-bounds Write

HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described i...

CVE-2022-44753: Out-of-bounds Write

HCL Notes is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted WordPerfect file. This vulnerability applies to software previously...

PT-2022-27303 · Hcl +1 · Hcl Notes +1

Name of the Vulnerable Software and Affected Versions: HCL Notes affected versions not specified Description: The issue is a stack-based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute...

PT-2022-27305 · Hcl +2 · Hcl Notes +2

Name of the Vulnerable Software and Affected Versions: HCL Notes affected versions not specified Description: The issue is related to a stack-based buffer overflow in lasr.dll within Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute...

CVE-2022-38653 HCL Digital Experience is susceptible to cross-site scripting (XSS)

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded...

CVE-2022-38653

HCL Digital Experience is reported vulnerable to a cross-site scripting (XSS) issue where a customized payload can be served unencoded in the application. The CVE-2022-38653 entry lists a CVSS v3.1 base score of 5.4 (MEDIUM) with NETWORK attack vector, LOW impact on confidentiality/integrity and ...

CVE-2022-38653 HCL Digital Experience is susceptible to cross-site scripting (XSS)

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded...

CVE-2022-38662 HCL Digital Experience is susceptible to open redirects

In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites...

CVE-2022-38662 HCL Digital Experience is susceptible to open redirects

In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites...

CVE-2022-38662

In HCL Digital Experience, the CVE-2022-38662 issue is an open redirect vulnerability caused by URL construction that can redirect users to untrusted sites. Affected product: HCL Digital Experience (web/DX URL handling). Impact: potential user redirection to attacker-controlled or untrusted desti...

PT-2022-24503 · Hcl · Hcl Digital Experience

Name of the Vulnerable Software and Affected Versions: HCL Digital Experience affected versions not specified Description: The issue allows a customized XSS payload to be constructed and served in the application unencoded. Recommendations: At the moment, there is no information about a newer...

CVE-2022-38653: Improper Neutralization of Input During Web Page Generation

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded...

HCL BigFix Multiple Vulnerabilities (KB0098998)

The version of HCL BigFix Client installed on the remote host is affected by multiple vulnerabilities, including the following: - An improper authentication vulnerability exists in the curl subcomponent which might allow reuse OAUTH2-authenticated connections without properly making sure that the...

CVE-2022-38662: URL Redirection to Untrusted Site

In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites...

PT-2022-24512 · Hcl · Hcl Digital Experience

Name of the Vulnerable Software and Affected Versions: HCL Digital Experience affected versions not specified Description: The issue allows URLs to be constructed in a way that redirects users to untrusted sites. Recommendations: At the moment, there is no information about a newer version that...

CVE-2022-42445

HCL Launch could allow a user with administrative privileges, including "Manage Security" permissions, the ability to recover a credential previously saved for performing authenticated LDAP searches...