Lucene search
+L

4218 matches found

OSV
OSV
•added 2020/07/07 3:15 p.m.•17 views

CVE-2019-4324

"HCL AppScan Enterprise is susceptible to Cross-Site Scripting while importing a specially crafted test policy."...

6.1CVSS6.4AI score0.00648EPSS
SaveExploits0References2
Prion
Prion
•added 2020/07/07 3:15 p.m.•32 views

Spoofing

"HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could allow an attacker to embed the contents of untrusted web pages in a frame."...

4.3CVSS4.6AI score0.0075EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2020/07/07 3:15 p.m.•29 views

Cross site scripting

"HCL AppScan Enterprise is susceptible to Cross-Site Scripting while importing a specially crafted test policy."...

4.3CVSS6AI score0.00648EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/07/07 2:49 p.m.•35 views

CVE-2019-4323

"HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could allow an attacker to embed the contents of untrusted web pages in a frame."...

4.6AI score0.0075EPSS
SaveExploits0References2
CVE
CVE
•added 2020/07/07 2:49 p.m.•56 views

CVE-2019-4323

CVE-2019-4323 concerns HCL AppScan Enterprise’s advisory API documentation being vulnerable to clickjacking. The CNVD entry specifies that AppScan Enterprise 10.0.0 and earlier versions are affected and that an attacker could inject content from untrustworthy pages by framing the advisory API doc...

4.3CVSS4.5AI score0.0075EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2020/07/07 2:45 p.m.•68 views

CVE-2019-4324

The provided connected documents confirm CVE-2019-4324 affects HCL AppScan Enterprise and describe it as a Cross-Site Scripting vulnerability that occurs when importing a specially crafted test policy. The exact root cause, affected versions/products beyond “HCL AppScan Enterprise,” and practical...

6.1CVSS6AI score0.00648EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/07/07 2:45 p.m.•34 views

CVE-2019-4324

"HCL AppScan Enterprise is susceptible to Cross-Site Scripting while importing a specially crafted test policy."...

6AI score0.00648EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/07 12:00 a.m.•2 views

CVE-2019-4323: Improper Restriction of Rendered UI Layers or Frames

"HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could allow an attacker to embed the contents of untrusted web pages in a frame."...

4.3CVSS5.9AI score0.0075EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/07 12:00 a.m.•4 views

CVE-2019-4324: Improper Neutralization of Input During Web Page Generation

"HCL AppScan Enterprise is susceptible to Cross-Site Scripting while importing a specially crafted test policy."...

6.1CVSS5.8AI score0.00648EPSS
SaveExploits0References2
CNVD
CNVD
•added 2020/07/02 12:00 a.m.•15 views

HCL Notes Cross-Site Scripting Vulnerability (CNVD-2021-13721)

HCL Notes is an email software from HCL India. The software supports access to emails, calendars, contacts and more. A cross-site scripting vulnerability exists in HCL iNotes. An attacker can exploit the vulnerability to obtain a user's cookie-based authentication credentials...

6.1CVSS6.3AI score0.00666EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/07/02 12:00 a.m.•17 views

Unspecified Vulnerability in HCL Domino

HCL Domino is a suite of enterprise-class application development platforms from HCL India. A security vulnerability exists in the TLS protocol implementation in HCL Domino server. A remote attacker can exploit the vulnerability to access sensitive information...

5.9CVSS6.8AI score0.00674EPSS
SaveExploits0References1
OSV
OSV
•added 2020/07/01 2:15 p.m.•10 views

CVE-2017-1659

"HCL iNotes is susceptible to a Cross-Site Scripting XSS Vulnerability. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials."...

6.1CVSS5.8AI score0.00666EPSS
SaveExploits0References1
NVD
NVD
•added 2020/07/01 2:15 p.m.•26 views

CVE-2017-1659

"HCL iNotes is susceptible to a Cross-Site Scripting XSS Vulnerability. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials."...

6.1CVSS0.00666EPSS
SaveExploits0References1
Prion
Prion
•added 2020/07/01 2:15 p.m.•27 views

Cross site scripting

"HCL iNotes is susceptible to a Cross-Site Scripting XSS Vulnerability. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials."...

4.3CVSS6AI score0.00666EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/07/01 1:45 p.m.•71 views

CVE-2017-1659

CVE-2017-1659 concerns HCL iNotes (HCL Notes) with a Cross-Site Scripting (XSS) vulnerability. The available documents describe that an attacker could exploit this to steal a user’s cookie-based authentication credentials. No explicit remediation, affected versions, or specific exploit details ar...

6.1CVSS6AI score0.00666EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/07/01 1:45 p.m.•40 views

CVE-2017-1659

"HCL iNotes is susceptible to a Cross-Site Scripting XSS Vulnerability. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials."...

6AI score0.00666EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/01 12:00 a.m.•4 views

CVE-2017-1659: Improper Neutralization of Input During Web Page Generation

"HCL iNotes is susceptible to a Cross-Site Scripting XSS Vulnerability. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials."...

6.1CVSS5.9AI score0.00666EPSS
SaveExploits0References2
CNVD
CNVD
•added 2020/06/28 12:00 a.m.•24 views

HCL Notes Information Disclosure Vulnerability

HCL Notes is an email software from HCL India. The software supports access to emails, calendars, contacts and more. An information disclosure vulnerability exists in HCL Notes versions 9, 10 and 11. The vulnerability stems from errors such as configuration during operation of a networked system ...

6.5CVSS6AI score0.01163EPSS
SaveExploits0References1
OSV
OSV
•added 2020/06/26 11:15 p.m.•14 views

CVE-2020-4089

HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol. This vulnerability could result in files from the user's filesystem or connected network filesystems being leaked to a third party. All versions of HCL Notes 9, 10 and 11 are affected...

6.5CVSS6.6AI score0.01163EPSS
SaveExploits0References1
NVD
NVD
•added 2020/06/26 11:15 p.m.•32 views

CVE-2020-4089

HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol. This vulnerability could result in files from the user's filesystem or connected network filesystems being leaked to a third party. All versions of HCL Notes 9, 10 and 11 are affected...

6.5CVSS0.01163EPSS
SaveExploits0References1
Rows per page
Query Builder