CVE-2020-4085: Generation of Error Message Containing Sensitive Information

"HCL Connections is vulnerable to possible information leakage and could disclose sensitive information via stack trace to a local user."...

CVE-2019-4327

"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files."...

Hardcoded credentials

"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files."...

CVE-2019-4327

"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files."...

CVE-2019-4327

CVE-2019-4327 affects HCL AppScan Enterprise. The connected CNVD entry specifies the vulnerability exists in AppScan Enterprise versions 9.0.3.14 and earlier, arising from the use of hard-coded credentials. As a result, an attacker could gain unauthorized access to the application's encrypted fil...

CVE-2019-4327: Use of Hard-coded Credentials

"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files."...

PT-2020-10942

Name of the Vulnerable Software and Affected Versions HCL AppScan Enterprise affected versions not specified Description The issue concerns the use of hard-coded credentials in HCL AppScan Enterprise, which can be exploited by attackers to gain unauthorized access to the application's encrypted...

Unspecified Vulnerability in HCL Technologies AppScan Standard Edition

HCL Technologies AppScan Standard Edition is a suite of dynamic analysis testing tools from HCL Technologies, India, which is primarily used for web security testing. HCL Technologies AppScan Standard Edition suffers from an unspecified vulnerability that stems from an incorrect account lockout...

HCL Technologies AppScan Standard Edition XXE Vulnerability

HCL Technologies AppScan Standard Edition is a suite of dynamic analysis testing tools from HCL Technologies, India, which is primarily used for web security testing. HCL Technologies AppScan Standard Edition suffers from an XXE vulnerability. An attacker can exploit this vulnerability to disclos...

CVE-2019-4393

HCL AppScan Standard is vulnerable to excessive authorization attempts...

CVE-2019-4391

HCL AppScan Standard is vulnerable to XML External Entity Injection XXE attack when processing XML data...

CVE-2019-4391

HCL AppScan Standard is vulnerable to XML External Entity Injection XXE attack when processing XML data...

CVE-2019-4393

HCL AppScan Standard is vulnerable to excessive authorization attempts...

Xxe

HCL AppScan Standard is vulnerable to XML External Entity Injection XXE attack when processing XML data...

Authorization

HCL AppScan Standard is vulnerable to excessive authorization attempts...

CVE-2019-4393

HCL AppScan Standard is vulnerable to excessive authorization attempts...

CVE-2019-4393

CVE-2019-4393 affects HCL AppScan Standard; root cause is an incorrect account lockout setting that enables excessive/brute-force authorization attempts. NVD notes a high-severity impact (CVSS 3.1: CRITICAL) with network exposure; exploitation status is not provided in the connected documents.

CVE-2019-4391

HCL AppScan Standard is vulnerable to XML External Entity Injection XXE attack when processing XML data...

CVE-2019-4391

CVE-2019-4391 concerns HCL AppScan Standard being vulnerable to XML External Entity (XXE) injection while processing XML data. The CVSSv3.1 base score is 8.2 (HIGH) with network attack vector, no privileges required, no user interaction, and a confidentiality impact of HIGH, availability impact L...

PT-2020-10946

Name of the Vulnerable Software and Affected Versions HCL AppScan Standard affected versions not specified Description The issue concerns an XML External Entity Injection XXE attack. This type of attack occurs when an application processes XML data that contains malicious external entities, which...