Lucene search
+L

609 matches found

Wallarm Lab
Wallarm Lab
•added 2024/02/07 10:23 a.m.•30 views

Digital Experience Monitoring | What Is DEM?

Introduction to Digital Experience Monitoring: Illuminating the Basics In an era governed by technology, the satisfaction of an end-user is of utmost importance. It has the power to stimulate or to halt business growth, and frequently determines if a client continues or discontinues their...

7.2AI score
SaveExploits0
CNNVD
CNNVD
•added 2024/02/07 12:00 a.m.•20 views

Liferay Portal and Liferay DXP Cross-Site Scripting Vulnerabilities

Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...

9.6CVSS5.8AI score0.00563EPSS
SaveExploits0References2
NCSC
NCSC
•added 2024/01/18 12:00 a.m.•72 views

Vulnerabilities fixed in Oracle Financial Services Applications

Oracle has fixed vulnerabilities in several Financial Services applications. A malicious party could exploit the vulnerabilities to execute attacks that could result in the following categories of damage: Denial-of-Service DoS Manipulation of data Circumvention of security measure Accessing...

10CVSS6.8AI score0.99891EPSS
SaveExploits53
Microsoft Secure
Microsoft Secure
•added 2023/11/28 5:00 p.m.•39 views

Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

Maintaining a secure and optimized digital environment allows new ideas to flourish wherever they occur. In the modern workplace, where devices and locations are no longer fixed, Microsoft Intune eases the task of managing and protecting the endpoints of businesses everywhere. It helps secure...

7.3AI score
SaveExploits0
Microsoft Malware Protection
Microsoft Malware Protection
•added 2023/11/28 5:00 p.m.•48 views

Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

Maintaining a secure and optimized digital environment allows new ideas to flourish wherever they occur. In the modern workplace, where devices and locations are no longer fixed, Microsoft Intune eases the task of managing and protecting the endpoints of businesses everywhere. It helps secure...

7.3AI score
SaveExploits0
NCSC
NCSC
•added 2023/10/19 12:00 a.m.•18 views

Vulnerabilities fixed in Liferay Portal and DXP

Liferay has fixed vulnerabilities in Portal and DXP. A malicious party could exploit the vulnerabilities to perform of cross-site scripting XSS attacks. Such attacks can lead to execution of script code in the context of the victim's browser, or access sensitive data in the context of the browser...

9.6CVSS5.9AI score0.02261EPSS
SaveExploits2
Github Security Blog
Github Security Blog
•added 2023/10/17 9:30 a.m.•18 views

Liferay Portal and Liferay DXP Vulnerable to Reflected XSS via the Export for Translation Page

Reflected cross-site scripting XSS vulnerability on the Export for Translation page before 2.0.86 from Liferay Portal 7.4.3.4 through 7.4.3.85, and Liferay DXP 7.4 before update 86 allows remote attackers to inject arbitrary web script or HTML via the...

9.6CVSS6.4AI score0.0046EPSS
SaveExploits0References3Affected Software2
CNNVD
CNNVD
•added 2023/10/17 12:00 a.m.•16 views

Liferay Portal and Liferay DXP Cross-Site Scripting Vulnerabilities

Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...

9.6CVSS6.4AI score0.0046EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/10/17 12:00 a.m.•19 views

Liferay Portal Cross-Site Scripting Vulnerability

Liferay Portal is a J2EE-based portal solution from Liferay, Inc. The solution uses technologies such as EJB and JMS, and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, and so on. A security vulnerability exists in Liferay Portal and...

9CVSS5.7AI score0.02239EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/10/17 12:00 a.m.•19 views

Liferay Portal and Liferay DXP Cross-Site Scripting Vulnerabilities

Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...

9CVSS5.5AI score0.00462EPSS
SaveExploits0References2
OSV
OSV
•added 2023/10/11 1:15 p.m.•16 views

CVE-2023-37538

HCL Digital Experience is susceptible to cross site scripting XSS. One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism email, other web site...

6.1CVSS5.2AI score0.00359EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/11 1:15 p.m.•33 views

CVE-2023-37538

HCL Digital Experience is susceptible to cross site scripting XSS. One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism email, other web site...

9.3CVSS8.9AI score0.00359EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/11 1:15 p.m.•25 views

Cross site scripting

HCL Digital Experience is susceptible to cross site scripting XSS. One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism email, other web site...

5.8CVSS6AI score0.00359EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/10/11 12:53 p.m.•35 views

CVE-2023-37538 HCL Digital Experience is susceptible to cross site scripting (XSS)

HCL Digital Experience is susceptible to cross site scripting XSS. One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism email, other web site...

9.3CVSS8.9AI score0.00359EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/10/11 12:53 p.m.•17 views

CVE-2023-37538 HCL Digital Experience is susceptible to cross site scripting (XSS)

HCL Digital Experience is susceptible to cross site scripting XSS. One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism email, other web site...

9.3CVSS6.1AI score0.00359EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/11 12:53 p.m.•79 views

CVE-2023-37538

HCL Digital Experience is affected by a reflected XSS vulnerability in one subcomponent. The issue requires a user to click a crafted URL conveyed via email or another web delivery method, enabling an attacker to perform cross-site scripting. The Connected documents do not provide explicit affect...

9.3CVSS6.6AI score0.00359EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/11 12:00 a.m.•7 views

CVE-2023-37538: Improper Neutralization of Input During Web Page Generation

HCL Digital Experience is susceptible to cross site scripting XSS. One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism email, other web site...

9.3CVSS5.6AI score0.00359EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/10/11 12:00 a.m.•20 views

PT-2023-26013 · Hcl · Hcl Digital Experience

Name of the Vulnerable Software and Affected Versions: HCL Digital Experience affected versions not specified Description: The issue concerns cross site scripting XSS, specifically reflected XSS, where an attacker must trick a victim into clicking a crafted URL sent through various means like ema...

9.3CVSS6AI score0.00359EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/10/11 12:00 a.m.•17 views

HCL Technologies HCL Digital Experience Cross-Site Scripting Vulnerability

HCL Technologies HCL Digital Experience is a suite of digital experience platforms, content delivery solutions from HCL Technologies, USA. A security vulnerability exists in HCL Technologies HCL Digital Experience. The vulnerability is exploited by attackers to perform cross-site scripting attack...

9.3CVSS6.1AI score0.00359EPSS
SaveExploits0References2
NCSC
NCSC
•added 2023/06/16 12:00 a.m.•18 views

Vulnerabilities fixed in Liferay Portal and DXP

Liferay has fixed vulnerabilities in Portal and DXP. A malicious party can exploit the vulnerabilities for various redirection attacks, such as Cross-site Scripting XSS and Cross-Source-Request-Forgery CSRF. Such attacks can lead to execution of script code in the context of the victim's browser,...

8.8CVSS6.7AI score0.00468EPSS
SaveExploits0
Rows per page
Query Builder