Lucene search
+L

4361 matches found

CNNVD
CNNVD
•added 2022/08/13 12:00 a.m.•19 views

HCL Leap 安全漏洞

HCL Leap is a low-code development platform from HCL India. HCL Leap suffers from a security vulnerability that stems from improper cleaning of SVG files, leading to client-side script injection in deployed applications...

5.4CVSS5.6AI score0.00228EPSS
SaveExploits0References2
OSV
OSV
•added 2022/08/03 8:15 p.m.•15 views

CVE-2022-27551

HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking...

6.5CVSS5.8AI score0.00528EPSS
SaveExploits0References1
NVD
NVD
•added 2022/08/03 8:15 p.m.•31 views

CVE-2022-27551

HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking...

6.5CVSS0.00528EPSS
SaveExploits0References1
Prion
Prion
•added 2022/08/03 8:15 p.m.•24 views

Input validation

HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking...

4CVSS6.1AI score0.00528EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/08/03 8:00 p.m.•40 views

CVE-2022-27551 HCL Launch could allow an authenticated user to obtain sensitive information (CVE-2022-27551)

HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking...

5.3CVSS6.4AI score0.00528EPSS
SaveExploits0References1
CVE
CVE
•added 2022/08/03 8:00 p.m.•99 views

CVE-2022-27551

CVE-2022-27551 affects HCL Launch. An authenticated user could obtain sensitive information due to improper security checking. Affected product/versions cited by connected sources include HCL Launch 7.x.x.x (CNNVD notes specific 7.0.0.0–7.0.5.11, 7.1.0.0–7.1.2.7, 7.2.0.0–7.2.3.0) with the issue s...

6.5CVSS5.6AI score0.00528EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/08/03 12:00 a.m.•20 views

HCL Technologies HCL Launch 安全漏洞

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, India. for handling the most complex deployment processes in DevOps. HCL Technologies HCL Launch versions 7.0.0.0 through 7.0.5.11, 7.1.0.0 through 7.1.2.7, and 7.2.0.0...

6.5CVSS6.6AI score0.00528EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/08/03 12:00 a.m.•17 views

PT-2022-18481 · Hcl · Hcl Launch

Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: The issue allows an authenticated user to obtain sensitive information in some instances due to improper security checking. Recommendations: At the moment, there is no information about ...

6.5CVSS6.2AI score0.00528EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/03 12:00 a.m.•7 views

CVE-2022-27551: Incorrect Authorization

HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking...

6.5CVSS6.6AI score0.00528EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/08/01 2:36 p.m.•8 views

CVE-2022-27551

HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking...

6.5CVSS5.9AI score0.00528EPSS
SaveExploits0References2
OSV
OSV
•added 2022/07/30 12:15 a.m.•15 views

CVE-2021-27785

HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information. The vulnerability requires the victim to first perform a particular operation on the website...

5CVSS5.8AI score0.00181EPSS
SaveExploits0References1
NVD
NVD
•added 2022/07/30 12:15 a.m.•36 views

CVE-2021-27785

HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information. The vulnerability requires the victim to first perform a particular operation on the website...

5CVSS0.00181EPSS
SaveExploits0References1
Prion
Prion
•added 2022/07/30 12:15 a.m.•33 views

Code injection

HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information. The vulnerability requires the victim to first perform a particular operation on the website...

1.5CVSS5AI score0.00181EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/07/30 12:00 a.m.•18 views

HCL Technologies HCL Commerce Remote Store server 安全漏洞

HCL Technologies HCL Commerce is a software platform framework for e-commerce from HCL Technologies India. The software includes marketing, sales, customer and order processing functionality in a customizable and integrated package. It is a unified platform that provides the ability to conduct...

5CVSS5.7AI score0.00181EPSS
SaveExploits0References2
CVE
CVE
•added 2022/07/29 11:55 p.m.•100 views

CVE-2021-27785

CVE-2021-27785 affects HCL Commerce (Remote Store server). The vulnerability could allow a local attacker to obtain sensitive personal information after the victim performs a specific operation on the website. Exploitability is local with low privileges and requires user interaction (UI:R) per CV...

5CVSS4.5AI score0.00181EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/07/29 11:55 p.m.•38 views

CVE-2021-27785 HCL Commerce could allow a local attacker to obtain sensitive personal information (CVE-2021-27785)

HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information. The vulnerability requires the victim to first perform a particular operation on the website...

3.9CVSS5.3AI score0.00181EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/07/29 12:36 p.m.•9 views

CVE-2021-27785

HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information. The vulnerability requires the victim to first perform a particular operation on the website...

5CVSS5.6AI score0.00181EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/07/29 12:00 a.m.•22 views

PT-2022-9870 · Hcl · Hcl Commerce

Name of the Vulnerable Software and Affected Versions: HCL Commerce affected versions not specified Description: The issue allows a local attacker to obtain sensitive personal information. The exploitation requires the victim to first perform a particular operation on the website. Recommendations...

5CVSS4.8AI score0.00181EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/29 12:00 a.m.•7 views

CVE-2021-27785: Insufficiently Protected Credentials

HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information. The vulnerability requires the victim to first perform a particular operation on the website...

5CVSS5.9AI score0.00181EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/07/19 3:40 p.m.•39 views

CVE-2022-27545 HCL BigFix Web Reports authorized users may perform HTML injection.

BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page...

4.6CVSS6.7AI score0.00336EPSS
SaveExploits0References1
Rows per page
Query Builder