CVE-2019-4391: Improper Restriction of XML External Entity Reference

HCL AppScan Standard is vulnerable to XML External Entity Injection XXE attack when processing XML data...

CVE-2019-4393: Improper Restriction of Excessive Authentication Attempts

HCL AppScan Standard is vulnerable to excessive authorization attempts...

HCL Connections Cross-Site Scripting Vulnerability (CNVD-2020-16627)

HCL Connections is social networking software designed for the workplace to help you build dynamic networks that connect you to the people and information you need to achieve your business goals. A cross-site scripting vulnerability exists in HCL Connections 5.5, 6.0, and 6.5. An attacker can...

CVE-2020-4084

HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-4084

HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Cross site scripting

HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-4084

HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-4084

CVE-2020-4084 affects HCL Connections v5.5, v6.0, and v6.5, where a cross-site scripting (XSS) vulnerability allows embedding arbitrary JavaScript in the Web UI, potentially altering functionality and leading to credentials disclosure within a trusted session. The connected documents provide the ...

CVE-2020-4084: Improper Neutralization of Input During Web Page Generation

HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

PT-2020-17870

Name of the Vulnerable Software and Affected Versions HCL Connections versions 5.5 through 6.5 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

CVE-2020-4082

The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting...

CVE-2020-4083

HCL Connections 6.5 is vulnerable to possible information leakage. Connections could disclose sensitive information via trace logs to a local user...

CVE-2020-4082

The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting...

Information disclosure

HCL Connections 6.5 is vulnerable to possible information leakage. Connections could disclose sensitive information via trace logs to a local user...

Cross site scripting

The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting...

CVE-2020-4082

The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting...

CVE-2020-4082

CVE-2020-4082 concerns the HCL Connections 5.5 help system, where improper validation of user-supplied input enables cross-site scripting. A remote attacker can craft a URL that, when clicked, runs script in the victim’s browser within the hosting site’s security context and can steal cookie-base...

CVE-2020-4083

CVE-2020-4083 affects HCL Connections 6.5, where information could be disclosed via trace logs to a local user. The connected documents provide the vulnerability description and CVSS metrics (CVSSv3.1 base score 5.5, MEDIUM; LOCAL access; high confidentiality impact) but do not include remediatio...

CVE-2020-4083

HCL Connections 6.5 is vulnerable to possible information leakage. Connections could disclose sensitive information via trace logs to a local user...

CVE-2020-4083: Insertion of Sensitive Information into Log File

HCL Connections 6.5 is vulnerable to possible information leakage. Connections could disclose sensitive information via trace logs to a local user...