134 matches found
EUVD-2025-201094
An issue in HCL Technologies Limited HCLTech GRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code via APIs do not enforcing limits on the number or size of requests...
PT-2025-48977
An issue in HCL Technologies Limited HCLTech GRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code via APIs do not enforcing limits on the number or size of requests...
CVE-2025-51735
CSV formula injection vulnerability in HCL Technologies Ltd. Unica 12.0.0...
CVE-2025-51733
Cross-Site Request Forgery CSRF vulnerability in HCL Technologies Ltd. Unica 12.0.0...
CVE-2025-51734
Cross-site scripting XSS vulnerability in HCL Technologies Ltd. Unica 12.0.0...
CVE-2025-51736
File upload vulnerability in HCL Technologies Ltd. Unica 12.0.0...
EUVD-2025-199876
File upload vulnerability in HCL Technologies Ltd. Unica 12.0.0...
EUVD-2025-199875
Cross-site scripting XSS vulnerability in HCL Technologies Ltd. Unica 12.0.0...
EUVD-2025-199874
Cross-Site Request Forgery CSRF vulnerability in HCL Technologies Ltd. Unica 12.0.0...
CVE-2025-51735
CSV formula injection vulnerability in HCL Technologies Ltd. Unica 12.0.0...
CVE-2025-51733
Cross-Site Request Forgery CSRF vulnerability in HCL Technologies Ltd. Unica 12.0.0...
CVE-2025-51734
Cross-site scripting XSS vulnerability in HCL Technologies Ltd. Unica 12.0.0...
CVE-2025-51734
Cross-site scripting XSS vulnerability in HCL Technologies Ltd. Unica 12.0.0...
CVE-2025-51733
Cross-Site Request Forgery CSRF vulnerability in HCL Technologies Ltd. Unica 12.0.0...
CVE-2025-51734
A cross-site scripting (XSS) vulnerability exists in HCL Technologies Ltd. Unica version 12.0.0 . This flaw allows for the injection of malicious scripts into web pages viewed by other users, which could potentially lead to unauthorized actions performed on behalf of a user. Remediation requires ...
EUVD-2025-199873
CSV formula injection vulnerability in HCL Technologies Ltd. Unica 12.0.0...
CVE-2025-51735
HCL Technologies Ltd. Unica version 12.0.0 is vulnerable to a CSV formula injection vulnerability (CWE-1236). This issue allows for potential manipulation through the use of crafted CSV files . While a specific exploit link is referenced in external sources, no direct exploit code or specific pro...
CVE-2025-51734
Cross-site scripting XSS vulnerability in HCL Technologies Ltd. Unica 12.0.0...