Code injection

HCL Digital Experience 8.5, 9.0, and 9.5 exposes information about the server to unauthorized users...

Code injection

HCL Digital Experience 9.5 containers include vulnerabilities that could expose sensitive data to unauthorized parties via crafted requests. These affect containers only. These do not affect traditional on-premise installations...

CVE-2020-4081

In Digital Experience 8.5, 9.0, and 9.5, WSRP consumer is vulnerable to cross-site scripting XSS...

CVE-2020-4081

CVE-2020-4081 affects HCL Digital Experience WSRP consumer in versions 8.5, 9.0, and 9.5 and is a cross-site scripting (XSS) vulnerability. Root cause cited in CNVD-2021-09494 is lack of proper validation of client-side data in the WEB application. Documented impact is XSS with no additional expl...

CVE-2020-14255

HCL Digital Experience 9.5 containers include vulnerabilities that could expose sensitive data to unauthorized parties via crafted requests. These affect containers only. These do not affect traditional on-premise installations...

CVE-2020-14255

CVE-2020-14255 affects HCL Digital Experience 9.5 containers, with information disclosure of sensitive data via crafted requests. Documents consistently describe the issue as container-scoped and not impacting on-premise installations. The core vulnerability details (root cause, affected componen...

CVE-2020-14221

Technical details about CVE-2020-14221 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2020-14221

HCL Digital Experience 8.5, 9.0, and 9.5 exposes information about the server to unauthorized users...

HCL Digital Experience 信息泄露漏洞

HCL Digital Experience is a suite of digital experience platforms, content delivery solutions from HCL India. HCL Digital Experience has a security vulnerability, which is exploited by an attacker to gain exposure to information about the server...

CVE-2020-4081: Improper Neutralization of Input During Web Page Generation

In Digital Experience 8.5, 9.0, and 9.5, WSRP consumer is vulnerable to cross-site scripting XSS...

PT-2021-9706

Name of the Vulnerable Software and Affected Versions HCL Digital Experience version 9.5 Description The issue affects HCL Digital Experience 9.5 containers, potentially exposing sensitive data to unauthorized parties through crafted requests. This issue is specific to containers and does not...

HCL Digital Experience 跨站脚本漏洞

HCL Digital Experience is a suite of digital experience platforms, content delivery solutions from HCL India. A cross-site scripting vulnerability exists in HCL Digital Experience versions 8.5, 9.0, and 9.5, which stems from the lack of proper validation of client-side data in the WEB application...

CVE-2020-14221: Undefined Security Weakness

HCL Digital Experience 8.5, 9.0, and 9.5 exposes information about the server to unauthorized users...

PT-2021-12114

Name of the Vulnerable Software and Affected Versions: Digital Experience versions 8.5 through 9.5 Description: The issue is related to a cross-site scripting XSS vulnerability in the WSRP consumer. This type of vulnerability allows attackers to inject malicious scripts into websites, potentially...

HCL Digital Experience 信息泄露漏洞

HCL Digital Experience is a suite of digital experience platforms, content delivery solutions from HCL India. A security vulnerability exists in HCL Digital Experience version 9.5 which allows exposure of sensitive data to unauthorized parties. No details of the vulnerability are available at thi...

CVE-2020-14255: Undefined Security Weakness

HCL Digital Experience 9.5 containers include vulnerabilities that could expose sensitive data to unauthorized parties via crafted requests. These affect containers only. These do not affect traditional on-premise installations...

PT-2021-9702

Name of the Vulnerable Software and Affected Versions HCL Digital Experience versions 8.5 through 9.5 Description The issue exposes information about the server to unauthorized users. Recommendations For HCL Digital Experience versions 8.5 through 9.5, at the moment, there is no information about...

Recent enhancements for Microsoft Power Platform governance

An emerging trend in digital transformation efforts has been the rise of low-code development platforms. Of course, these low-code platforms must be grounded in best-of-breed governance capabilities which include security and compliance features. Without strong governance, the full benefits of...

Recent enhancements for Microsoft Power Platform governance

An emerging trend in digital transformation efforts has been the rise of low-code development platforms. Of course, these low-code platforms must be grounded in best-of-breed governance capabilities which include security and compliance features. Without strong governance, the full benefits of...

Gaming Software Supply-Chain Attack Installs Spyware

Researchers allege, attackers have compromised the update mechanism of NoxPlayer, which is software that allows gamers to run Android apps on their PCs or Macs. They then installed malware onto victims’ devices with surveillance-related capabilities. NoxPlayer is developed by BigNox, which is a...