CVE-2020-4082: Improper Neutralization of Input During Web Page Generation

The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting...

PT-2020-17868

Name of the Vulnerable Software and Affected Versions HCL Connections version 5.5 Description The issue is caused by improper validation of user-supplied input, leading to cross-site scripting. A remote attacker could exploit this using a specially-crafted URL to execute script in a victim's Web...

PT-2020-17869

Name of the Vulnerable Software and Affected Versions HCL Connections version 6.5 Description The issue concerns possible information leakage, where sensitive information could be disclosed via trace logs to a local user. Recommendations For HCL Connections version 6.5, consider restricting acces...

CVE-2019-4392

HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system...

Hardcoded credentials

HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system...

CVE-2019-4392

CVE-2019-4392 affects HCL AppScan Standard Edition (version 9.0.3.13 and earlier). The underlying issue is hard-coded credentials in the product, enabling attackers to gain unauthorized access. CVSS indicates high/critical impact (C/H, I/H, A/H) with network attack vector and no user interaction....

CVE-2019-4392

HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system...

CVE-2019-4392: Use of Hard-coded Credentials

HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system...

PT-2020-10947

Name of the Vulnerable Software and Affected Versions HCL AppScan Standard Edition versions 9.0.3.13 and earlier Description The issue concerns the use of hard-coded credentials, which can be exploited by attackers to gain unauthorized access to the system. Recommendations For HCL AppScan Standar...

HCL Technologies AppScan Source Cross-Site Scripting Vulnerability

HCL Technologies AppScan Source is a static application security testing solution from HCL Technologies India. A cross-site scripting vulnerability exists in HCL Technologies AppScan Source. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An...

CVE-2019-4388

HCL AppScan Source 9.0.3.13 and earlier is susceptible to cross-site scripting XSS attacks by allowing users to embed arbitrary JavaScript code in the Web UI...

CVE-2019-4388

HCL AppScan Source 9.0.3.13 and earlier is susceptible to cross-site scripting XSS attacks by allowing users to embed arbitrary JavaScript code in the Web UI...

Cross site scripting

HCL AppScan Source 9.0.3.13 and earlier is susceptible to cross-site scripting XSS attacks by allowing users to embed arbitrary JavaScript code in the Web UI...

CVE-2019-4388

HCL AppScan Source 9.0.3.13 and earlier is susceptible to cross-site scripting XSS attacks by allowing users to embed arbitrary JavaScript code in the Web UI...

CVE-2019-4388

CVE-2019-4388 affects HCL AppScan Source (≤ 9.0.3.13). The vulnerability is described as cross-site scripting (XSS) in the Web UI, allowing embedding of arbitrary JavaScript. Several connected records corroborate an XSS issue stemming from insufficient validation of client-side data. The exact te...

PT-2019-17056

Name of the Vulnerable Software and Affected Versions HCL AppScan Source versions 9.0.3.13 and earlier Description The issue allows users to embed arbitrary JavaScript code in the Web UI, making it susceptible to cross-site scripting XSS attacks. Recommendations For versions 9.0.3.13 and earlier,...

CVE-2019-4388: Improper Neutralization of Input During Web Page Generation

HCL AppScan Source 9.0.3.13 and earlier is susceptible to cross-site scripting XSS attacks by allowing users to embed arbitrary JavaScript code in the Web UI...

CVE-2019-4409

HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the Problem Report page of the Traveler servlet pages, there is a field to specify a file attachment to provide additional problem details. An invalid file name returns an error message that includes the...

CVE-2019-4409

HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the Problem Report page of the Traveler servlet pages, there is a field to specify a file attachment to provide additional problem details. An invalid file name returns an error message that includes the...

Cross site scripting

HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the Problem Report page of the Traveler servlet pages, there is a field to specify a file attachment to provide additional problem details. An invalid file name returns an error message that includes the...