CVE-2022-38656 HCL Commerce, when using Elasticsearch, could be affected by a denial of service vulnerability

HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site and make administrative changes...

CVE-2022-38656 HCL Commerce, when using Elasticsearch, could be affected by a denial of service vulnerability

HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site and make administrative changes...

CVE-2022-38661

CVE-2022-38661 affects HCL Workload Automation. The connected sources describe a vulnerability in the Jlog component of the Master Domain Manager that could allow a local user to overwrite key system files, potentially crashing the system. NVD lists a local, low-complexity attack with high availa...

CVE-2022-38661 HCL Workload Automation is affected by a vulnerability in Jlog component of the Master Domain Manager

HCL Workload Automation could allow a local user to overwrite key system files which would cause the system to crash...

CVE-2022-38661 HCL Workload Automation is affected by a vulnerability in Jlog component of the Master Domain Manager

HCL Workload Automation could allow a local user to overwrite key system files which would cause the system to crash...

CVE-2022-38654 HCL Domino is susceptible to an information disclosure vulnerability

HCL Domino is susceptible to an information disclosure vulnerability. In some scenarios, local calls made on the server to search the Domino directory will ignore xACL read restrictions. An authenticated attacker could leverage this vulnerability to access attributes from a user's person record...

CVE-2022-38654

CVE-2022-38654 affects HCL Domino. The vulnerability is an information disclosure where local server calls to search the Domino directory can ignore xACL read restrictions, allowing an authenticated attacker to access attributes from a user’s person record. Reported base metrics indicate CVSS v3....

CVE-2022-38654 HCL Domino is susceptible to an information disclosure vulnerability

HCL Domino is susceptible to an information disclosure vulnerability. In some scenarios, local calls made on the server to search the Domino directory will ignore xACL read restrictions. An authenticated attacker could leverage this vulnerability to access attributes from a user's person record...

CVE-2022-38660

HCL XPages applications are susceptible to a Cross Site Request Forgery CSRF vulnerability. An unauthenticated attacker could exploit this vulnerability to perform actions in the application on behalf of the logged in user...

CVE-2022-38660

HCL XPages applications are susceptible to a Cross Site Request Forgery CSRF vulnerability. An unauthenticated attacker could exploit this vulnerability to perform actions in the application on behalf of the logged in user...

Cross site request forgery (csrf)

HCL XPages applications are susceptible to a Cross Site Request Forgery CSRF vulnerability. An unauthenticated attacker could exploit this vulnerability to perform actions in the application on behalf of the logged in user...

CVE-2022-38660

HCL XPages applications are vulnerable to CSRF (CVE-2022-38660). An unauthenticated attacker could perform actions in the application on behalf of a logged-in user. The NVD entry lists CVSSv3.1 base score 8.8 (HIGH) with AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H; a CNA note with 8.3 (HIGH) shows A: LOW...

CVE-2022-38660 HCL XPages applications are susceptible to Cross Site Request Forgery (CSRF) vulnerability

HCL XPages applications are susceptible to a Cross Site Request Forgery CSRF vulnerability. An unauthenticated attacker could exploit this vulnerability to perform actions in the application on behalf of the logged in user...

CVE-2022-38660 HCL XPages applications are susceptible to Cross Site Request Forgery (CSRF) vulnerability

HCL XPages applications are susceptible to a Cross Site Request Forgery CSRF vulnerability. An unauthenticated attacker could exploit this vulnerability to perform actions in the application on behalf of the logged in user...

CVE-2022-38660: Cross-Site Request Forgery (CSRF)

HCL XPages applications are susceptible to a Cross Site Request Forgery CSRF vulnerability. An unauthenticated attacker could exploit this vulnerability to perform actions in the application on behalf of the logged in user...

PT-2022-24510 · Hcl · Hcl Xpages

Name of the Vulnerable Software and Affected Versions: HCL XPages affected versions not specified Description: The issue is related to a Cross Site Request Forgery CSRF vulnerability, which allows an unauthenticated attacker to perform actions in the application on behalf of the logged-in user...

HCL Technologies XPages 跨站请求伪造漏洞

HCL Technologies XPages is an XML interpreted by a Domino server or Notes client and rendered in a web browser or Notes client by HCL Technologies India. A security vulnerability exists in HCL Technologies XPages that stems from the presence of cross-site request forgery CSRF, which can be...

PT-2022-24506 · Elastic +1 · Elasticsearch +1

Name of the Vulnerable Software and Affected Versions: HCL Commerce affected versions not specified Description: The issue allows a remote attacker to cause a denial of service attack on the site and make administrative changes when HCL Commerce is used with Elasticsearch. Recommendations: At the...

CVE-2022-38654: Exposure of Sensitive Information to an Unauthorized Actor

HCL Domino is susceptible to an information disclosure vulnerability. In some scenarios, local calls made on the server to search the Domino directory will ignore xACL read restrictions. An authenticated attacker could leverage this vulnerability to access attributes from a user's person record...

CVE-2022-38656: Undefined Security Weakness

HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site and make administrative changes...