CVE-2022-27561

There is a reflected Cross-Site Scripting vulnerability in the HCL Traveler web admin LotusTraveler.nsf...

HCL Technologies VersionVault Express Information Disclosure Vulnerability

HCL Technologies VersionVault Express is an intuitive side-by-side comparison viewer from HCL Technologies, India. to easily compare files and directories in it. An information disclosure vulnerability exists in HCL Technologies VersionVault Express version 2.0.1, version 2.1.0, which stems from...

CVE-2022-27563

An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service...

Command injection

HCL VersionVault Express exposes administrator credentials...

Denial of service

An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service...

CVE-2022-27563 Overload/denial of service affects HCL VersionVault Express

An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service...

CVE-2022-27563

CVE-2022-27563 affects HCL VersionVault Express. An unauthenticated attacker can overload a section of VersionVault Express, producing a denial-of-service condition. Public references in the dataset cite affected versions (e.g., HCL VersionVault Express 2.0.1/2.1.0 in CNVD) and describe the impac...

CVE-2022-27560 An insufficiently protected credential vulnerability affects HCL VersionVault Express

HCL VersionVault Express exposes administrator credentials...

CVE-2022-27560

CVE-2022-27560 affects HCL VersionVault Express. The CNVD/CNNVD entries describe an information-disclosure vulnerability in VersionVault Express versions 2.0.1 and 2.1.0 caused by exposure of administrator credentials, which can enable an attacker to gain full control of the device. The issue is ...

HCL Technologies VersionVault Express 安全漏洞

HCL Technologies VersionVault Express is an intuitive side-by-side comparison viewer from HCL Technologies, India. to easily compare files and directories in it. An information disclosure vulnerability exists in HCL Technologies VersionVault Express version 2.0.1, version 2.1.0, which stems from...

PT-2022-18484 · Hcl · Hcl Versionvault Express

Name of the Vulnerable Software and Affected Versions: HCL VersionVault Express affected versions not specified Description: The issue concerns the exposure of administrator credentials in HCL VersionVault Express. No information is provided about the estimated number of potentially affected...

PT-2022-18486 · Hcl · Hcl Versionvault Express

Name of the Vulnerable Software and Affected Versions: HCL VersionVault Express affected versions not specified Description: An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service. Recommendations: At the moment, there is no information about a newer...

CVE-2022-27560: Insufficiently Protected Credentials

HCL VersionVault Express exposes administrator credentials...

CVE-2022-27563: Improper Check for Unusual or Exceptional Conditions

An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service...

CVE-2022-27546

HCL iNotes is susceptible to a Reflected Cross-site Scripting XSS vulnerability caused by improper validation of user-supplied input supplied with a form POST request. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's web browser with...

CVE-2022-27547

HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to trick a user into supplying sensitive information such as username, password, credit card number, etc...

CVE-2022-27546

HCL iNotes is susceptible to a Reflected Cross-site Scripting XSS vulnerability caused by improper validation of user-supplied input supplied with a form POST request. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's web browser with...

CVE-2022-27558

HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability. Custom password policies are not enforced on certain iNotes forms which could allow users to set weak passwords, leading to easier cracking...

CVE-2022-27547

HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to trick a user into supplying sensitive information such as username, password, credit card number, etc...

Cross site scripting

HCL iNotes is susceptible to a Reflected Cross-site Scripting XSS vulnerability caused by improper validation of user-supplied input supplied with a form POST request. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's web browser with...